ERR_CERT_UNABLE_TO_CHECK_REVOCATION
ERR_CERT_UNABLE_TO_CHECK_REVOCATION Error
What This Error Means
The ERR_CERT_UNABLE_TO_CHECK_REVOCATION error indicates that the browser tried to verify if the website's certificate has been revoked (via OCSP or CRL) but failed to reach the revocation server. For security reasons, some environments treat this failure as a hard error.
Common Causes
- The Certificate Authority's OCSP server is down or unreachable.
- A firewall is blocking access to the OCSP URL defined in the certificate.
- The certificate does not contain valid revocation information.
- Network connectivity issues preventing the check.
- Strict revocation checking is enabled in the OS or browser.
How to Fix It (For Users)
- 1 Disable 'Check for server certificate revocation' in Internet Options (Windows) temporarily (not recommended for security).
- 2 Check your internet connection.
- 3 Contact the site owner.
For Site Owners / Developers
- Enable OCSP Stapling on your web server to provide revocation status directly.
- Ensure your certificate's AIA (Authority Information Access) extension is correct.
- Contact your Certificate Authority if their OCSP responders are unstable.
- Verify that your server can reach the CA's revocation servers.
When It Is NOT Your Fault
If the Certificate Authority's infrastructure is offline.
Check if this outage affects everyone globally
This error often indicates a wider problem. Use our tool to verify if the site is down for everyone.
Check Website Status →Recommended Tool to Prevent This Error
Get alerted immediately when your SSL certificate expires or your site goes down.