Revoked SSL certificate

This is not an error. The certificate has been revoked by the certificate authority (digicert in this case).

You can test yourself at: https://decoder.link/ocsp

Somewhere in your SDK this certificate is used. Or it's presented to you by paypal. So either update your SDK or tell paypal to replace that certificate.

You could disable access to http://ocsp.digicert.com in your firewall to prevent the check of the CRL (certificate revocation list). But this is not a good idea.


As a temporary solution, you could add this certificate to the Trusted People store on your server.

To do so:

  • copy/paste certificate into a .crt file;
  • double click on it from Windows Explorer;
  • select Install Certificate;
  • Store Location: Local Machine;
  • Place all certificates in the following store;
  • Browse and select Trusted People store

No need to block anything on the Firewall.

Attention!

Doing so presents a security risk for your communications! Please apply your due diligence there