Google Trust Services: Incorrect OCSP responses for certain certificates

Google Trust Services identified an issue where their OCSP responders were returning HTTP 404 response codes for a small number of domains issued under GTS CA 1D4. The CA became aware of the problem on June 9, 2022, through internal monitoring and initiated an incident response. A fix was deployed by 17:50 UTC the same day, which significantly reduced the error rate. The CA confirmed that this incident did not result in misissuance of certificates, and they are working on deprecating the older OCSP responder infrastructure. The issue has been resolved and the bug is now closed.

1. 2022-06-09 Google Trust Services identified incorrect OCSP responses for certain certificates.

1. 2022-06-09 Google representative — We were alerted by internal monitoring that our OCSP responders were returning an HTTP 404 response code for a small number of domains issued under GTS CA 1D4.
2. 2022-06-16 Google representative — A timeline of the actions your CA took in response was provided.
3. 2022-07-22 Google representative — We have completed the deployment of a change that migrates all remaining traffic from the older responder infrastructure.
4. 2022-07-28 Mozilla representative — I'll close this tomorrow, 29-July-2022, unless there are issues or questions that need to be addressed.