# curl (Windows Schannel): schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate

**Code:** `CRYPT_E_NO_REVOCATION_CHECK` · **Category:** SSL / TLS · **Seen on:** SSL, Windows

Windows could not contact the CA's CRL/OCSP servers to check whether the certificate is revoked, so Schannel aborted.

## Meaning

Typical behind a firewall, proxy or corporate network that blocks the CRL/OCSP URLs. Allow outbound access to the CA's revocation endpoints, or (only as a temporary workaround) use `curl --ssl-no-revoke`. Offline environments need CRL caching or revocation checks configured accordingly.

## Common causes

- Firewall/proxy blocking CRL or OCSP hosts
- Offline or restricted network
- DNS failure for the revocation endpoint
- CA's OCSP responder unavailable
- Corporate TLS inspection

## Quick fix

1. Allow HTTP access to the CA's CRL/OCSP URLs
2. Workaround: `curl --ssl-no-revoke https://host`
3. Check the certificate's CRL distribution points

## Detailed fix by platform

### PowerShell

1. `certutil -verify -urlfetch cert.cer` tests reachability of CRL/OCSP URLs

## How to diagnose

1. **Network** — CRL/OCSP reachable?
2. **Proxy** — Blocks them?
3. **Temporary** — --ssl-no-revoke?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/ssl/curl-crypt-e-no-revocation-check)