Revoked Issuing CA Certificate still showing as valid

Hi There.
I have an Intermediate CA (Enterprise) and an Offline root CA, both running Windows CA.
The Intermediate CA's first cert was revoked and the Root CA's CRL with the revoked cert published.
A new cert was issued to the Intermediate CA, so now I can see both:
I have cleared the CRL cache with the command:
certutil -setreg chain\ChainCacheResyncFiletime @now
on my workstation and did a check on the certificate #0. It still shows as valid.
I have checked the serial number and made sure that the serial is in the root ca's revocation list.
What am I missing?
Thank you.

Hi,
We cannot revoke root certificates since root certificates are excluded from revocation checking.
As far as I know, we should leave the former CA certificate there, since former CRL requires the old certificate for signing; even after the former CA certificate expire, it can be used for digital signature verification.
Here are some similar threads below for you:
Can you revoke a root certificate
https://social.technet.microsoft.com/Forums/windowsserver/en-US/3941e831-b477-4998-8145-445c56783436/can-you-revoke-a-root-certificate?forum=winserversecurity
How to remove an expired certificate from a RootCA
https://social.technet.microsoft.com/Forums/windowsserver/en-US/48958ec4-330e-43df-9ecf-6d23a6c05b7b/how-to-remove-an-expired-certificate-from-a-rootca?forum=winserversecurity
Clean up multiple Root Certificates from a CA
https://social.technet.microsoft.com/forums/windowsserver/en-US/c5c29079-fe41-44aa-a4ff-f8ba976a8018/clean-up-multiple-root-certificates-from-a-ca
Cleanup of Issuing CA Certificates
https://social.technet.microsoft.com/Forums/windowsserver/en-US/0b8eea11-3a9b-49e6-abe9-b09de203231a/cleanup-of-issuing-ca-certificates?forum=winserversecurity
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

  • Revoked Computer certificate, still appears within the pc

    Hello,
       I have just revoked a Computer certificate, from my Domain Controller (the one that holds the Certificate Services).
    When I log into this computer, and I go to MMC, I still see the Computer Certificate, and it seems to be running, beecause I don't see any red alert sign, saying "This certificate is revoked" or something like that.
    Just in case, I restarted the computer twice and restarted the Certificate service in the domain controller.
      This domain controller is issuing User certificates all right, as I have just tested, to figure out why all this is happening.
    Do I have to manually remove the certificate from the pc?, then, what is the use of revoking it from the Certificate Services Server ?.
    Thanks a lot in advance!
    Luis Olías Técnico/Admon Sistemas . Sevilla (España - Spain)

    First, when you open certificate, only certification path is constructed. NO REVOCATION CHECKING IS PERFORMED. If the certificate was issued manually, then you will have to manually remove it from the server. If the certificate was issued via autoenrollment,
    then autoenrollment will automatically remove it (if Autoenrollment policy in GPO is configured to remove revoked certificates).
    My weblog: en-us.sysadmins.lv
    PowerShell PKI Module: pspki.codeplex.com
    PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
    Check out new:
    SSL Certificate Verifier
    Check out new:
    PowerShell FCIV tool.

  • Action with out validation still showing error messages

    Hello, I have a save action on a PopUp thats has the "with out validation" checked but still the error messages are shown... the problem is that y want to validate the fields by myself, not let the framework do it.
    The other question I had is, is there a way to show the validation messages from the framework into the popup? because there are showing in the main window.
    Thanks.

    the problem is the acceptable range is wrong or probably wrong.  this is resulting in your download speed being lower than the acceptable range and therefore shown in red
    If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
    If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

  • I have deleted all my videos songs and photos from my iphone 4 but when i connect to itunes it still shows 17gb free. how can I solve this issue without restore. Total storage of my iphone is 32 gb.

    I have deleted all my videos songs and photos from my iphone 4 but when i connect to itunes it still shows 17gb free. how can I solve this issue without restore. Total storage of my iphone is 32 gb.

    I don't see an issue, but if you mean why didn't you get most of your memory back you need to see what else is using storage. Go to Settings/General/Usage. Wait a bit for it to calculate storage allocation, then when it finishes you can see how much storage each app uses.

  • I switched my iPod Nano from a PC to my macbook air. The info and iTunes still shows it as a windows device, just want to confirm that is ok. Next issue, which is, as usual, my wrongdoing. When I locked my iPod it used to show the time, pls advise

    Hello to my always excellent community who always gives me the right answers. I switched my iPod Nano library from my PC to my new macbook air with the help of an excellent and courteous gentleman. The info on my Ipod and on iTunes still shows my Ipod Nano as a windows device, just want to confirm that is ok.  Next issue, which is, as usual, is prob my wrongdoing. When I locked my iPod it used to show the time of day, don't even know how I got it to do that and can't remember if it stopped doing so before or after the swith. Can anyone please advise or help? I hope Thank you and if you do reply, thank you in advance for my lack of tech terms and look at my username

    I see that there are a lot of views and no replies, so it's clearly a user issue...SHOCKER!!!
    In trying to figure out the above; I stumbled upon the link below which taught me how to change/update my iPod Nano to show Version 1.0.2. Mac rather than the windows version 1.x.xPC it was still showing after I transferred my itunes library from my old pc to my new macbook air......I didn't dowlnload the iPod updater 2006-06-28 for Mac and once I did....whoa!!! I got my calendar and reminders on my nano now it's like a new toy all over again, just follow the steps in the below article, if I can do it, a 2 year old can
    http://support.apple.com/kb/HT1339?viewlocale=en_US&locale=en_US

  • Items have been goods issued in R/3 but are still showing as Not GId in APO

    2 products have been goods issued and the delivery is complete in R/3 but are still showing as Not Goods issued in APO.Please suggest.

    Hi Usman,
    Could you please let me know which table did you refer to find out the status of an order i.e., whether the order line has been Goods Issued or not?
    Thanks,
    Babu Kilari

  • Nokia 301 shows "no valid certificate"

    Dear nokia, when i try to download games from ovi store (from my game menu option) it shows "no valid certificate" what 's the problem? I try to download prince of persia, some puzzle games, raceing games. Most of the time i received that message. How can i able to download? Please slove.
    Moderator's Note: The subject was amended as this was moved to the most appropriate board.

    Hi, rickaustin54. Welcome to our community. Have you already tried the solution given by Abi99? Aside from that, you can also check the following information:
    First check that your device date, time and time zone are correct.
    Check that your device has the latest software installed via Nokia Suite or go to settings > phone > device updates > downl. phone sw.
    Let us know the outcome. 

  • Still having issues with animate composition showing in chrome

    I created a wonderful childrens activity page using animate.  For some reason everything shows up in the local preview, but once put onto a live host for public consumption, the animate portion of the paqe does not show up in Chrome.  It takes a few seconds in Firefox, IE, and Safari due to 4 Audio files but the composition is displayed once they are done loading.  It won't show period in Chrome. 
    When I first starting having the issue I noticed two 404 errors related to min.map files for jquery and edge.  I had a friend tell me that it had something to do with Chrome's unwillingness to work with local jquery hosted libraries.  I changed the publish settings so that the runtime files would refer to CDNs.  Even with this I'm still having issues.
    the 404 still exists for the edge file, but the jquery file is returning a 304 error now.  What is the deal with this and why isn't my work being displayed in Chrome?  Is this a bug? Or is there some kind of workaround for Chrome's inconcsistancy with this?  I really need this page viewable yesterday, so any and all assistance with this will be supererbly appreciated.
    The page in referenece is http://steamcurriculum.com/whatsmissing/index.html  and as you will see, only Chrome does not display the edge composition.

    Have you removed the page as i get redirected to http://steamcurriculum.blogspot.in/p/home.html/whatsmissing/index.html
    I do not see any edge realted content even in the source of this page

  • HT1918 When I enter my new card it still shows declined why is it doing this?

    When I enter my new card it still shows my card to be declined why?

    What are you trying to use as your payment method, credit card or debit card ? If it's a debit card then I don't think that they are still accepted as a valid payment method in all countries - from this page :
    You may be able to use other payment types in your country, like debit and Maestro cards.
    which implies that they are not accepted in all countries, and there have been a number of posts about them being declined.
    For a card to have a chance of being accepted it needs to be registered to exactly the same name and address (including format and spacing etc) that you have on your iTunes account, and have been issued by a bank in the country where you and your iTunes account are. If it is then you could check with the card issuer to see if it's them that are declining it, and if not then try contacting iTunes Support (these are user-to-user forums) and see if they know why it's being declined (but you might not be able to use a debit card) : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Account Management

  • HT1338 i have downloaded the new updates and restart the computor. The software updates still show the same software to be updated. I could not update itune 11.0.1 version

    HI,
    I have issue in updating software for my Macbook Pro and it kept showing the same software to be updated. I have restart the computer after install the software and still showing the same issue. In addition, i could not update the new itune version and every website i goes to it will show a msg indicating that the website is might not be the real website and would ask me to choose; show certificate, cancel or continue. This applies to the apple website as well.
    Pls help and advice.

    What version of OS X are you running?
    What updates are you downloading and from where?

  • HT4623 My deleted contacts still show up when I want to send a text message. But when I go to my address book there not there only when I want to send a text MSG there name comes up and if I select them it only show there number not name in the message. 

    My deleted contacts still show up when I want to send a text message. But when I go to my address book there not there only when I want to send a text MSG there name comes up and if I select them it only show there number not name in the message.  How an I get rid of that

    Try this...
    have a text convo with the person you want to delete. Go to the top contact in the text convo, hit edit contact, and delete that contact.
    That resolution came from another thread on this issue, and this did solve to poster's issue.

  • I deleted a contact out of my iPhone 4S but when I go to send a message the contact appears although that individual is no longer in my address book. I deleted all text and call history pertaining to the deleted contact but still shows up.

    I deleted a contact out of my iPhone 4S but when I go to send a message the contact appears although that individual is no longer in my address book. I deleted all text and call history pertaining to the deleted contact but still shows up. Does anyone have the same issue and how do I fix it?

    dam122577 wrote:
    but wont restoring as new delete all my info on my phone
    Yes. That is why I added...
    it will disappear over time due to non-use.

  • My deleted contacts still show up when I want to send a text message. But when I go to my address book there not there only when I want to send a text MSG there name comes up and if I select them it only show there number not name in the message.  How an

    My deleted contacts still show up when I want to send a text message. But when I go to my address book there not there only when I want to send a text MSG there name comes up and if I select them it only show there number not name in the message. How an I get rid of that

    Try this...
    have a text convo with the person you want to delete. Go to the top contact in the text convo, hit edit contact, and delete that contact.
    That resolution came from another thread on this issue, and this did solve to poster's issue.

  • I changed my Apple ID email address yesterday and now my IPhone 4 and my Ipod 5 will not allow me to upload any apps as they both still show my old email address.  How do I change the email address on the devices???

    I changed my Apple ID email address yesterday and now my IPhone 4 and my IPod 5 will not allow me to upload any apps.  When it asks for my Apple Password it still shows my old email address.  How do I change the IPhone and IPod to recognize the new email address????

    Hello there, emsariel.
    The following Knowledge Base article offers up some great information in regards to the issue you are describing:
    iOS 7: If you're asked for the password to your previous Apple ID when signing out of iCloud
    http://support.apple.com/kb/ts5223
    Thanks for reaching out to Apple Support Communities.
    Cheers,
    Pedro.

  • I not so recently changed my email adress I associated with my Apple ID and my iCloud ID. My old email still shows up for iCloud, and won't let me change it to my new email. When I try to delete it and replace it with the proper email, it wants my passwor

    I not so recently changed my email adress I associated with my Apple ID and my iCloud ID. My old email still shows up for iCloud, and won't let me change it to my new email. When I try to delete it and replace it with the proper email, it wants my password, which it won't accept because it's an invalid username.

    I had this same issue and got it resolved very simply when I contacted Apple SUpport
    Go to https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/ and sign into your infomation
    > Go to Manage apple id and primary email address
    > Change it to the old apple id that your device is asking for
    > Save changes
    > Go to Settings > iCloud and sign out of the infomation
    > Go back to https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/
    > Change it back to the correct apple id
    > Go to the email address adn reverify the apple id
    > Sign back into iCloud on your device
    > Smile
    Article to back up my statement http://support.apple.com/kb/TS5223

Maybe you are looking for