DigiCert: OCSP responders returned unauthorized for an issued TLS certificate
DigiCert reported a certificate problem involving OCSP responders for a TLS server certificate it issued. A subscriber reported that the OCSP service identified in the certificate's AIA extension returned `unauthorized (6)` instead of an authoritative status. DigiCert said the certificate itself was correctly issued and that the issue was limited to availability of certificate status information, not certificate content. In its full incident report, DigiCert said a change to the OCSP publication path delayed completion of a full pre-signed OCSP batch, which caused responders to return `unauthorized` for certificates in the affected serial-number prefix until the batch completed. DigiCert said no certificates were revoked as a result of the incident and that it completed one action item, while requesting a later update for the remaining action item.
- OCSP responders began returning non-authoritative responses for the affected certificate's serial-number prefix after a change to the OCSP publication path.
- DigiCert received the Certificate Problem Report and later restored authoritative OCSP responses when the delayed batch completed.
- DigiCert filed its full incident report and described the cause, impact, and remediation status.
- DigiCert reported completion of one action item and requested a next update date for the remaining item.
- DigiCert — DigiCert filed a preliminary incident report saying it had received a third-party Certificate Problem Report about OCSP returning `unauthorized (6)` for an issued TLS certificate.
- DigiCert — DigiCert said it was continuing its investigation and would post a full incident report by September 22.
- DigiCert — DigiCert posted its full incident report, explaining the delayed OCSP batch generation and the restoration of authoritative responses.
- Community commenter — A commenter asked for weekly updates and noted that a new whiteboard date had not been requested.
- DigiCert — DigiCert said it had completed Action Item 3 and requested a next update date of 20261113 for the remaining Action Item 1.