What does "Warning in Revoked: 'Unable to check revocation status'" mean?

When opening a certificate to view its details, there should be a property called "CRL distribution points", containing a URL pointing to the so-called revocation list. If this can't be performed, it could mean that the certificate has no CRL it points to, so the revocation cannot be checked. In this case you could simply click on the channel "Revocation Status" and change in its settings-dialogue the Lookup field to "None".

In case the certificate contains a URL to check revocation status, the Probe running the sensor (PRTG Core Server or Remote Probe) needs internet access in order to check the revocation status.

Our core server meets all these conditions but still shows this error message. Might it be because we are using a wildcard certificate?

Hi underm,

No, wildcard certificate should be no problem. Have you checked whether the certificate in question carries a "CRL distribution points" entry in its details (Rightclick -> Properties)? To make sure that the right certificate is being checked, you can enable "Write Sensor result to disk" in the sensor's settings. With the next scan it will write the certificate into PRTG's sensor logfolder C:\ProgramData\Paessler\PRTG Network Monitor\Logs (Sensors) (look for the file that has the same ID in its name as the sensor in its "Overview" tab).

If you can't sort this out, contact us by email ([email protected]) and include that certificate from "Write result to disk" ("Result of numerical_sensor_id.cer") and a screenshot of the sensor's "Settings" tab. Mention this KB thread and address it to me by writing "Hi Erhard" for example at the beginning of your message :)

Thank you & kind regards.