← Google Trust Services LLC cases
Bugzilla #1522975 Certificate Problem Report

Google Trust Services: Improper OCSP response for intermediate certificate

RESOLVED FIXED Google Trust Services LLC
AI Summary

Google Trust Services LLC reported an incident regarding an improper OCSP response generated for its intermediate CA, GTSY1. The issue arose during a signing ceremony in October 2018, where a serial number mismatch was discovered on January 11, 2019. Although the incorrect OCSP response did not impact any subscribers or relying parties, the incident highlighted the need for improved monitoring and linting processes. Remediation actions included publishing a corrected OCSP response and enhancing the configuration checks to prevent similar errors in the future.

Model: gpt-4o-mini Generated: 2026-06-13 17:59 UTC Confidence: 0.95
Chronology
  1. Config file created and submitted to version control.
  2. OCSP responses created and signed.
  3. Serial mismatch discovered.
  4. New OCSP response published.
Participants
Ryan Sleevi Kluge Wayne Thayer
Similar Local Cases
#1630079 RESOLVED Certificate Problem Report Opened 2020-04-14 · Closed 2023-02-22 · 59% similar
Google Trust Services: Invalid OCSP responses
#1630040 RESOLVED Certificate Problem Report Opened 2020-04-14 · Closed 2023-02-22 · 59% similar
Google Trust Services: OCSP serving issue 2020-04-09
#1634795 RESOLVED Certificate Problem Report Opened 2020-05-01 · Closed 2023-02-22 · 58% similar
Google Trust Services: Incorrect revocation data temporarily served for GTS Y3 & Y4
#1581183 RESOLVED Certificate Problem Report Opened 2019-09-13 · Closed 2023-02-22 · 58% similar
Google Trust Services: CRL handling of expired certificates not fully compliant with RFC 5280 Section 3.3
#1715421 RESOLVED Certificate Problem Report Opened 2021-06-09 · Closed 2023-02-22 · 57% similar
Google Trust Services: Failure to revoke subscriber certificates within BR timeframe
#1706967 RESOLVED Certificate Problem Report Opened 2021-04-22 · Closed 2023-02-22 · 57% similar
Google Trust Services: Forbidden Domain Validation Method 3.2.2.4.10
#1532333 RESOLVED Certificate Problem Report Opened 2019-03-04 · Closed 2023-02-22 · 57% similar
Camerfirma: Unrevocation of MULTICERT SSL Certification Authority 001 certificate
#1678183 RESOLVED Certificate Problem Report Opened 2020-11-19 · Closed 2023-02-22 · 56% similar
Google Trust Services: Invalid ASN.1 encoding of singleExtensions in OCSP responses

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action