Dealing with SSL Certificate Validation Failures
Here's a quick list of things to try when debugging a non-functioning SSL server certificate.
-
Has the certificate expired or been revoked?
-
Does the MMC Certificate Manager say that the certificate is valid?
-
Is the certificate in the LocalMachine store?
-
Have you registered the certificate to the address and port of your service?
-
Does the registered thumbprint match the SHA1 thumbprint of the certificate?
-
Does the certificate address match the address in your service URI?
-
Is the root certificate valid and in the trusted root store?
-
Is the certificate revocation server reachable and functioning?
Next time: When to Wait for Messages