The certificate is invalid or the revocation could not be verified

Question

Hello!

I am issuing a certificate for the Exchange server:

I'm doing...

1. Create a request for a certificate signed by a certification authority.
2. I save it in .REQ format.
3. I log into Active Directory Certificate Services (Microsoft) on my server.
4. Certificate Request – Extended Certificate Request – Paste the key from the previously saved .REQ file – Web Server Template – Obtain the certnew.cer file
5. I finish registering the certificate, specify the file certnew.cer - and immediately receive the status Invalid or Failed to check revocation.

Could you tell me please, what could be wrong?

Thank you very much!

Answer 1

Hi @Александр Сергеевич，

Thanks for posting in our Q&A forum.

The status “Invalid” or “Failed to check revocation” after registering a certificate could be due to several reasons. Here are a few possible causes:

1. Certificate Revocation List (CRL) or Online Certificate Status Protocol (OCSP) misconfiguration: If the certificate authority’s CRL or OCSP information is set up incorrectly, or if the Exchange server is unable to access them, it may result in a failed revocation check.
2. Network connectivity issues: Ensure that your Exchange server has internet connectivity, as it needs to communicate with the certificate authority server to check the certificate’s state.
3. Server cache: Clearing the cache on the server might help resolve the issue.
4. Time synchronization: Ensure that the time on your Exchange server is correctly synchronized with a reliable time source.

Similar issue thread please refer to: https://learn.microsoft.com/en-us/answers/questions/656464/certificate-revocation-check-failed-microsoft-exch

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.