# Chrome: Your connection is not private — NET::ERR_CERT_REVOKED (the certificate was revoked)

**Code:** `NET::ERR_CERT_REVOKED` · **Category:** Browser · **Seen on:** Chrome, Edge

The site’s TLS certificate has been revoked by the certificate authority, so browsers refuse to trust it.

## Meaning

Revocation happens when a private key leaks, the certificate was issued wrongly, or the owner asked for it. Visitors cannot safely proceed. Owners must issue a new certificate (new key) and install it everywhere (web server, load balancer, CDN origin).

## Common causes

- Private key compromised and certificate revoked
- Certificate mis-issued and revoked by the CA
- Old certificate still installed after a replacement
- Intercepting proxy using a revoked intermediate

## Quick fix

1. Owners: reissue the certificate with a new private key and install the full chain
2. Visitors: do not bypass the warning; contact the site owner
3. Check the certificate status with an online SSL checker

## Detailed fix by platform

### Linux

1. `openssl s_client -connect example.com:443 -servername example.com </dev/null | openssl x509 -noout -serial -dates -issuer` then check the serial on the CA's revocation page
2. With Let's Encrypt: `sudo certbot renew --force-renewal`

## How to diagnose

1. **Certificate** — Which serial and issuer?
2. **Install** — Is the new chain deployed on every endpoint?
3. **Key** — Was the old key rotated?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/browser/err-cert-revoked)