iPhone certificate revoked? Check before replacing it
If an iPhone shows “Unable to Verify App” or signed apps suddenly stop opening, the signing certificate might be revoked or expired. But a bad IPA or mismatched provisioning profile can look similar. Check the cause before paying for replacement files.
How to tell whether your signing certificate is the problem
- Multiple previously working apps fail: certificate expiry or revocation is possible, but not confirmed by the message alone.
- Only one IPA fails: check that app's version, entitlements and compatibility before replacing signing files.
- ESign or Feather rejects the password: verify the exact .p12 password; this is not evidence of revocation by itself.
- One device fails while another works: check the provisioning profile and registered UDID.
Check these four things before buying replacement files
- Use the CertDrop Certificate Health Check to inspect certificate and profile details where possible.
- Confirm the iPhone or iPad UDID matches the provisioning profile.
- Try a known compatible IPA, or use the IPA Compatibility Check to investigate a single failing build.
- Review the signing-error troubleshooting guide for verification, trust, and signer import issues.
If Apple has revoked the certificate or it has expired, the same files cannot be made valid simply by reinstalling them. Replacement files and re-signing may be needed.
Already bought a certificate from CertDrop?
If your CertDrop order stopped working, contact CertDrop support before purchasing again. Include your order email and the exact error, so the team can investigate certificate status and available assistance. The presence of an error does not automatically mean you need a second purchase.
If you need a new device-matched package after confirming that replacement is required, CertDrop offers a .p12 certificate, matching .mobileprovision profile, and password for $8. The advertised certificate validity is 360 days, subject to revocation and app compatibility.
Order replacement certificate — $8Certificate revocation FAQs
Does “Unable to Verify App” always mean revocation?
No. It may also result from expiry, provisioning mismatches, network verification, incompatible IPA files, or missing permissions. Diagnose the cause first.
Can I make an Apple-revoked certificate valid again?
No. A certificate actually revoked by Apple cannot be repaired by importing it again. If signing files must be replaced, compatible IPA apps usually need to be signed and installed again.
Do existing CertDrop customers need to pay again?
Not necessarily. Contact support with your order information and error details before making another purchase, so available assistance can be checked.
What comes with a replacement signing package?
A device-matched .p12 signing certificate, .mobileprovision profile, certificate password, and access to your delivery files.