← DigiCert cases
Bugzilla #1627152
Certificate Problem Report
DigiCert: OCSP NextUpdate
RESOLVED
DigiCert
AI Summary
DigiCert identified a compliance issue related to OCSP responses for S/MIME certificates, where the nextUpdate field was not being populated as required by Mozilla's policy. The issue was traced back to legacy software used by some SubCAs, which did not allow for the inclusion of this field. DigiCert has since implemented a fix and confirmed that the issue has been resolved, with all affected customers successfully deploying the patch.
Chronology
- SubCA requested clarification on OCSP requirements.
- DigiCert confirmed the absence of nextUpdate in OCSP responses.
- Internal team scoped project to address the issue.
- Patch released to customers.
- Remediation confirmed complete.
Participants
Brenda Bernal
Ryan Sleevi
External References
Similar Local Cases
DigiCert: Failure to properly encode Subject name
DigiCert: CAA Checking Issue
DigiCert: Underscores - Citi
DigiCert: Underscores - Discover
DigiCert: Failure to provide a preliminary report within 24 hours.
DigiCert: "Internet Widgits Pty Ltd" in organizationalUnitName
DigiCert: Failure to disclose Unconstrained Intermediate within 7 Days
DigiCert: Underscores - Ericsson