Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com ), so withholding your domain name here does not increase secr…

Did some more digging and found what the answer is. We were blocking the http requests at our firewall due to a GeoBlocking policy. However, this is not something we can unblock, nor is there a simple fix as the OCSP is hosted by akamai. We are occasionally getting non-US based IPs from akamai’s glo…

2600:1404:1400:1::ace8:5a0 is in Dallas and 23.6.118.192 is in Atlanta from my perspective.

Sure, but I’ve also seen all these IPs come across as well. And others that I havnt written down. 23.52.14.139 <<<< this pair being the most common… 23.52.14.137 23.52.14.144 23.52.14.139 <<< all these come back as Germany / Netherlands/ UK and are geoblocked. 23.40.205.50 <<< VA, MA, GA …

Failed OCSP Requests

Help

Topic		Replies	Views
OCSP r3.o.lencr.org is not working in China for 184.50.87.27 Help	8	1039	April 26, 2022
Unauthorized trying to fetch OCSP response Help	18	2759	July 6, 2018
OSCP servers are inaccesible from some servers Issuance Tech	14	5923	December 11, 2017
All our network blocked/banned Help	1	2952	December 21, 2016
OCSP responder not available using IPv6 Help	2	997	August 28, 2019

Failed OCSP Requests

Related topics