← DigiCert cases
Bugzilla #1523676 · Certificate Problem Report
DigiCert: Good OCSP Responses for Revoked Intermediates
DigiCert · RESOLVED
AI Summary
This case addresses an issue where DigiCert's OCSP responder was returning 'good' status for several revoked intermediates associated with the Baltimore CyberTrust Root. The problem was identified by Corey Bonnell and reported to the Mozilla community. DigiCert promptly investigated and corrected the OCSP responses within hours of being notified, ensuring accurate revocation information was provided.
Chronology
- Issue reported by Corey Bonnell
- DigiCert acknowledged the issue and began remediation
- OCSP responses corrected
- Case closed
Participants
Wayne Thayer
Ben Wilson
External References
Similar Local Cases
DigiCert: Symantec non-constrained/non-disclosed intermediate CA certificates
DigiCert / ADACOM: published expired CRLs
DigiCert: Non-BR-Compliant OCSP Responders
DigiCert: 4 CRLs unavailable or not responding
DigiCert: no subject alternative name in Siemens certs
DigiCert: Apple: Precertificates without corresponding certificates return OCSP value of "unknown"
DigiCert: Undisclosed CAs -Federated Trust CA-1
DigiCert: Invalid Country Code Issuance