← Google Trust Services LLC cases
Bugzilla #1630079 Certificate Problem Report

Google Trust Services: Invalid OCSP responses

RESOLVED FIXED Google Trust Services LLC
AI Summary

This case addresses an incident involving Google Trust Services (GTS) where invalid OCSP responses were generated due to a change in the batching process of OCSP response generation. The issue was first reported by users experiencing problems with OCSP checking in Firefox, particularly those using a 'hard-fail' configuration. The problem was acknowledged by GTS, and remediation procedures were initiated once the issue was identified. The incident was resolved approximately 2 days after it began, with no prior customer reports received during the outage.

Model: gpt-4o-mini Generated: 2026-06-13 21:21 UTC Confidence: 0.90
Chronology
  1. Code push to improve OCSP generation initiated.
  2. User reports OCSP issues on mozilla.dev.security.policy.
  3. GTS acknowledges the issue.
  4. Remediation procedures triggered.
  5. Issue resolved.
Participants
Ryan Sleevi Andy Warner
Similar Local Cases
#1678183 RESOLVED Certificate Problem Report Opened 2020-11-19 · Closed 2023-02-22 · 67% similar
Google Trust Services: Invalid ASN.1 encoding of singleExtensions in OCSP responses
#1630040 RESOLVED Certificate Problem Report Opened 2020-04-14 · Closed 2023-02-22 · 67% similar
Google Trust Services: OCSP serving issue 2020-04-09
#1706967 RESOLVED Certificate Problem Report Opened 2021-04-22 · Closed 2023-02-22 · 66% similar
Google Trust Services: Forbidden Domain Validation Method 3.2.2.4.10
#1634795 RESOLVED Certificate Problem Report Opened 2020-05-01 · Closed 2023-02-22 · 66% similar
Google Trust Services: Incorrect revocation data temporarily served for GTS Y3 & Y4
#1522975 RESOLVED Certificate Problem Report Opened 2019-01-25 · Closed 2023-02-22 · 59% similar
Google Trust Services: Improper OCSP response for intermediate certificate
#1581183 RESOLVED Certificate Problem Report Opened 2019-09-13 · Closed 2023-02-22 · 59% similar
Google Trust Services: CRL handling of expired certificates not fully compliant with RFC 5280 Section 3.3
#1715421 RESOLVED Certificate Problem Report Opened 2021-06-09 · Closed 2023-02-22 · 56% similar
Google Trust Services: Failure to revoke subscriber certificates within BR timeframe
#1758372 RESOLVED Certificate Problem Report Opened 2022-03-07 · Closed 2023-02-22 · 51% similar
Google Trust Services: Incorrect OCSP response for issued certificate

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action