0

I bought and installed a SSL cert for my domain but then changed my mind and canceled the purchase and bought a slightly cheaper one. The old cert is then revoked and I proceed to install the new cert.

Here is when things got worse. The domain still showing old revoked SSL and that makes my site couldn't be loaded on Firefox or any browser which are using OCSP. I tried reinstalling the new cert and even reissue it but to no avail.

Can anyone tell me how exactly can I purge the old revoked cert from getting in a way of the new cert? I believed this has caused downtime to my site.

Is this an issue with SSL provider or server side? The hosting company kept bouncing this and blaming SSL provider while the other one pointed me to the hosting company.

  • What kind of hosting setup do you have? Maybe I'm to evangelical, but is LetsEncrypt an option for you? – Jenessa Aug 20 at 7:44
  • 3
    You should reach your hosting provider, it is certainly their issue. Seems like, they failed to replace revoked certificate in HTTPS bindings. It is not an SSL provider's issue. – Crypt32 Aug 20 at 8:23
-1

Very simple solution for such issue is just redirect all https request to http using 301 and visa versa.

this will refresh browser and server ssl caching.

hope this will help.

  • Hi vrkansagara, welcome to Information Security! Can you explain a little bit more about how this works and when you can/cannot use it? – Jenessa Aug 20 at 8:37
  • 1
    You can’t redirect from https to http for a revoked cert. the browser will fail before that happens. – ISMSDEV Aug 20 at 9:07
  • @ISMSDEV Can you provide any good article on https will not redirect http ! This will be useful for other as well. – vrkansagara Aug 26 at 18:02
  • I’m not saying you can’t redirect between protocols. But you cannot redirect a failed https handshake, due to an invalid cert, to http. If you could that would render https cert verification pointless. Google “redirect https invalid cert to http” plenty of articles, some even on here. – ISMSDEV Aug 27 at 6:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.