Based on announcements by DigiCert and Let's Encrypt, GlobalSign has found that our Precertificates without corresponding certificates also return Unauthorized or Unknown. We're working with PrimeKey on a patch and are also updating our own OCSP services to return the proper values.
Here are 2 examples: https://crt.sh/?id=1707464536 <https://crt.sh/?id=1707464536&opt=ocsp> &opt=ocsp https://crt.sh/?id=1725532369 <https://crt.sh/?id=1725532369&opt=ocsp> &opt=ocsp Bug opened: https://bugzilla.mozilla.org/show_bug.cgi?id=1579413
Description: S/MIME cryptographic signature
_______________________________________________ dev-security-policy mailing list firstname.lastname@example.org https://lists.mozilla.org/listinfo/dev-security-policy