SSL.com: "unknown" OCSP response for issued certificates
SSL.com reported an incident where OCSP responders for 67 certificates returned an "unknown" status, violating their Certificate Practice Statement (CPS) regarding online revocation checking. The issue was identified following a third-party Certificate Problem Report submitted on March 25, 2025. SSL.com took immediate action to resolve the OCSP response issue and began an investigation into the root cause, which was linked to intermittent failures in inserting newly issued certificates into their CA database. A full incident report was provided, detailing the timeline and remediation actions. The incident was resolved by implementing controls to automatically detect and import missing certificates, and SSL.com committed to improving their monitoring systems. The case is now closed as of July 31, 2025.
- Third-party Certificate Problem Report submitted regarding OCSP errors.
- Incident Closure Summary posted, detailing resolution and future commitments.
- SSL.com — Preliminary Incident Report posted, summarizing the OCSP issue and immediate actions taken.
- SSL.com — Full Incident Report provided, detailing the root cause and timeline of the incident.
- SSL.com — Report Closure Summary posted, confirming the completion of all action items.