Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

When Firefox tries to go to a site with a revoked SSL certificate, it displays an error page telling me that the certificate was revoked, but doesn't have any information about why this is. Is there a way I can find out why the server's certificate was revoked? CAs obviously publish the fact that they revoked a certificate, but do they also say why they revoked it, and is there a way for me as a user (and not a browser) to look at that information myself?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

Address of a site would be of help. No, CAs do not publish any information why certificates are revoked. Most likely they were compromised thus should not be trusted.

share|improve this answer
    
The site I had in mind replaced their certificate between the time I encountered the problem and the time I asked the question. –  Paul Kuliniewicz Feb 18 '12 at 20:40
add comment

There is only one reason a CA would revoke a certificate -- the CA no longer wishes to vouch for the association between the holder of the private key corresponding to the public key in the certificate and the name on the certificate.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.