none
Server 2003 Ca, CRL questions. RRS feed

  • Question

  • I am attempting to unrevoke a certificate that landed in the CRL that should not have.

    Ideas?

    C:\Documents and Settings\seajos>certutil -revoke xxxxxxxxxxxxxxxxxxxxx 8
    Revoking "56d9bfd8000200001238" -- Reason: Remove From CRL
    CertUtil: -revoke command completed successfully.

    C:\Documents and Settings\seajos>certutil -revoke xxxxxxxxxxxxxxxxxxxxx-1
    Revoking "56d9bfd8000200001238" -- Reason: Unrevoke
    ICertAdmin::RevokeCertificate: The data is invalid. 0x8007000d (WIN32: 13)
    CertUtil: -revoke command FAILED: 0x8007000d (WIN32: 13)
    CertUtil: The data is invalid.

    certutil -view revoked (after the prior command)

      Revocation Date: 9/5/2013 10:29 AM
      Effective Revocation Date: 9/5/2013 10:29 AM
      Revocation Reason: 0x8 -- Reason: Remove From CRL

    BEFORE:
      Revocation Date: 9/4/2013 3:44 PM
      Effective Revocation Date: 9/4/2013 3:44 PM
      Revocation Reason: 0x5 -- Reason: Cessation of Operation

    Thursday, September 5, 2013 3:19 PM