DigiCert: OCSP services returns 1 byte

RESOLVED FIXED DigiCert

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

DigiCert reported an issue where their OCSP service returned a 1-byte response instead of a valid signed OCSP response for a specific certificate. The problem was identified on August 27, 2019, when a user reported the invalid response. DigiCert investigated and discovered that the issue was due to a server misconfiguration that caused incorrect responses to be cached. They implemented a fix and confirmed that valid responses were being returned by August 28, 2019. The root cause was addressed, and a script was developed to ensure OCSP responses for pre-certificates are generated correctly in the future. The issue was resolved and the bug was marked as fixed on October 15, 2019.

Model: gpt-4o-mini Generated: 2026-06-13 11:34 UTC Revised: 2026-06-16 19:00 UTC Confidence: 0.90 19 comments

Chronology

2019-08-27 A bug was opened reporting that a valid OCSP response was not being returned.
2019-08-28 DigiCert confirmed that a valid response was being returned after addressing the issue.
2019-10-15 The patch to resolve the issue was deployed to production.

Thread Activity

2019-08-27 Apple representative — Reported that the OCSP response returned is 1 byte in length.
2019-08-28 DigiCert — Confirmed that a valid response is now being returned for the certificate.
2019-10-22 Fastly representative — Noted that all questions have been answered and remediation is complete.

Participants

Apple representative DigiCert Community commenter Fastly representative

External References

Original Bugzilla Case

Similar Local Cases

#1662346 RESOLVED Ca Security Vulnerability Security Incident Opened 2020-09-01 · Closed 2023-02-22 · 100% similar

DigiCert: OCSP responder returning invalid responses

AI Summary CA Owner

#1816806 RESOLVED Ca Security Vulnerability Security Incident Opened 2023-02-15 · Closed 2023-03-09 · 89% similar

DigiCert: OCSP not responding issue

AI Summary CA Owner

#1675684 RESOLVED Ca Security Vulnerability Security Incident Opened 2020-11-06 · Closed 2023-02-22 · 87% similar

DigiCert: Private Keys Disclosed by Customers as Part of CSR

AI Summary CA Owner

#1744795 RESOLVED Ca Security Vulnerability Security Incident Opened 2021-12-07 · Closed 2023-02-22 · 87% similar

DigiCert: Issuance of certs with weak keys (ROCA)

AI Summary CA Owner

#1820269 RESOLVED Ca Security Vulnerability Security Incident Opened 2023-03-03 · Closed 2024-06-30 · 80% similar

DigiCert: 4 CRLs unavailable or not responding

AI Summary CA Owner

#1484766 RESOLVED Self Reported Incident Revocation Issue Security Incident Opened 2018-08-20 · Closed 2024-06-30 · 76% similar

GoDaddy: Random Value Vulnerability in Domain Validation Method

AI Summary CA Owner

#1554259 RESOLVED Self Reported Incident Security Incident Opened 2019-05-24 · Closed 2023-02-22 · 75% similar

GlobalSign: SPKI lacks explicit NULL parameter,

AI Summary CA Owner

#1427034 RESOLVED Ca Security Vulnerability Security Incident Opened 2017-12-25 · Closed 2024-05-09 · 75% similar

DigiCert: localbattle.net certificate with private key in software / issued by Digicert

AI Summary CA Owner