Error 500 / 'Certificate is revoked' on CAC sites
Symptoms
Webmail or other CAC sites return 'Error Code: 500 Internal Server Error' or 'Certificate is revoked'.
Likely cause
A bad cross-certificate or Federal Bridge cert is poisoning the chain, the wrong cert was offered, or the browser cached a failed handshake.
Fix
Windows:
1. Run the IE configuration steps in the Making_AKO_work_with_Internet_Explorer guide.
2. Run the Cross Cert Removal Tool v1.14 (3 Mar 2016) from militarycac.com.
3. Make sure you pick the right cert (EMAIL vs PIV/Authentication) for the site.
4. Close every browser window and retry.
5. If still broken, call Army Enterprise Service Desk 866-335-2769.
Mac:
1. Follow the Mac-specific keychain clean-up at militarycac.com/keychain.htm.
2. Confirm the correct PIV Authentication cert is chosen.
3. Clear the login keychain Identity Preference entries for the failing site.
Sourced from militarycac.com. Rewritten for clarity.
Didn't work, or need it tailored to your setup?
Ask the AI assistant