Elastic Windows Event Explorer


Publisher - Schannel

Event ID 36883

Message:

The certificate received from the remote server has been revoked. This means that the certificate authority that issued the certificate has invalidated it. The TLS connection request has failed. The attached data contains the server certificate.

Event Data:

# Name In Type
Out Type
1 __binLength win:UInt32 xs:unsignedInt
2 certificateContext win:Binary xs:hexBinary

Observed Windows Versions:

Version: 0

Fingerprint: E62P36NBPW3M2