I used the ‘openssl ocsp’ command here to test the status of my revoked certificate:
And it appeared that the OCSP was updated at 13:00 UTC, but then there was an update at 19:00 UTC. I was expecting it update today (8/1) at 13:00 UTC(09:00 EDT), but has not happened.
Further, when I check one (good) cert, I get:
- This Update: Jul 31 13:00:00 2018 GMT
But on another (revoked) cert I get:
- This Update: Jul 31 19:00:00 2018 GMT
- Revocation Time: Jul 31 18:59:56 2018 GMT
Is there a fixed schedule for updates to the OCSP server? If it is not fixed, is there particular criteria that is used?
Is there a document / FAQ / weblog post / etc which describes OCSP updates?
Thanks for any info.