← Sectigo cases
Bugzilla #2031087
Certificate Problem Report
Sectigo: Partial OCSP response publication delay for newly issued certificates
RESOLVED
FIXED
Sectigo
AI Summary
Sectigo experienced a partial OCSP response publication delay affecting newly issued certificates due to a database replication lag in their US datacenter. This issue was reported on April 9th, 2026, when unauthorized OCSP responses were returned for some certificates. The problem resolved itself by the time it was reviewed, but the investigation revealed that the replication lag caused some OCSP requests to be unavailable. As a precaution, CertStatus Web nodes in the affected datacenter were disabled until further mitigation measures could be implemented.
Chronology
- Received Certificate Problem Report regarding OCSP unauthorized responses.
- Compliance team starts investigating the replication lag issue.
- Report closure summary provided, detailing root cause and remediation.
Participants
Martijn Katerbarg
External References
Similar Local Cases
Sectigo: Intermittent OCSP unauthorized responses for certificates older than 15 minutes
Sectigo: Temporary failure to publish OCSP responses for newly issued certificates
Sectigo: S/MIME certificates with (null) string value in subject attributes
Sectigo: Incorrect OCSP responses
Sectigo: Non-existent hostname in CDP and AIA URLs
Sectigo: Incomplete Subject organizationName
Sectigo: Certificate issuance delayed for more than 398 days after DCV was completed
Sectigo: HTML encoded characters in subject attribute values