How to tell if an (offline) SSL Certificate been revoked

I would like to know whether an SSL certificate was revoked. The website no longer serves up that certificate, I only have the domain name and the serial number.

The SSL certificate was replaced 5 months before expiry without explanation. That doesn't sound normal to me as that's nearly 25% of the lifetime of the certificate "thrown away" early so I suspect it was revoked.

I would like to know how to check this, as I can only find methods that will check the status of a "live" certificate.


Solution 1:

If the cert provider and the signing certificate are the same in both the old and the new certificates, then you can use the CRL link in the new certificate. This will list all of the certificates revoked under the signing certificate.