StartCom: OCSP responder often returns "unknown" for recently-issued certificates

The case involves StartCom's OCSP responder frequently returning 'unknown' for recently issued certificates, causing connection errors for users. This issue was triggered when users attempted to access sites with newly issued certificates, leading to errors indicating that the OCSP server had no status for the certificate. StartCom acknowledged the problem but did not provide a fix, resulting in the bug being marked as resolved with a 'WONTFIX' status. The resolution indicates that the responsibility lies with StartCom to address the OCSP responder's update delays.

1. 2014-05-06 User reports OCSP responder issues leading to connection errors.
2. 2022-11-14 Bug marked as resolved with a 'WONTFIX' status.

1. 2014-05-06 Iserv representative — Reported that StartSSL's OCSP server takes hours to update, causing 'unknown' responses.
2. 2014-08-28 Briansmith representative — Explained that the OCSP requirements were changed to enhance security against mis-issuance.
3. 2014-09-29 Mozilla representative — Assigned the issue to Eddy Nigg for further action.
4. 2017-03-20 Mozilla representative — Resolved the bug, indicating that if StartCom becomes trusted again, they may not face the same issues.