diff --git a/wfe/wfe.go b/wfe/wfe.go
index 3d52ac30..1232b673 100644
--- a/wfe/wfe.go
+++ b/wfe/wfe.go
@@ -3011,13 +3011,13 @@ func (wfe *WebFrontEndImpl) processRevocation(
 		return acme.MalformedProblem("Error decoding Base64url-encoded DER: " + err.Error())
 	}
 
+	revokedCert := wfe.db.GetRevokedCertificateByDER(derBytes)
+	if revokedCert != nil {
+		return acme.AlreadyRevokedProblem("Certificate has already been revoked.")
+	}
+
 	cert := wfe.db.GetCertificateByDER(derBytes)
 	if cert == nil {
-		cert := wfe.db.GetRevokedCertificateByDER(derBytes)
-		if cert != nil {
-			return acme.AlreadyRevokedProblem("Certificate has already been revoked.")
-		}
-
 		return acme.MalformedProblem("Unable to find specified certificate.")
 	}