Home / server / Questions / 177811
Accepted
Ondrej Tucny
Asked: 2010-09-04 07:50:26 +0800 CST

Unrevoke a certificate which was revoked with a status different from Certificate Hold

  • 772

Is there a way to unrevoke a revoked certificate, which was revoked with the “Superseded” reason code?

I'm using the Certification Authority provided with Windows Server 2008 SP2.

certificate certificate-authority revoked

2 Answers

  1. Certificates revoked with the reason code "Certificate Hold" can be unrevoked, left on "Certificate Hold" until they expire, or have their revocation reason code changed. "Certificate Hold" is the only revocation reason that will allow you to unrevoke the certificate. It is useful if the status of the certificate is questionable and is meant to provide some flexibility to the CA administrator.

    To unrevoke a certificate revoked with the reason code "Certificate Hold," at a command prompt on the CA, type:

    certutil -revoke CertificateSerialNumber unrevoke

    • 4
  2. Best Answer

    Once on the revoked list... it stays on the revoked list. That's why they recommend you NEVER revoke a cert unless you know it's been compromised.

    • 3