none
OCSP validation of SSL certificate (id-pkix-ocsp-nocheck)??

    Question

  • I am conducting OCSP validation on SSL certificates in IE browser.
    However, the results differ depending on whether or not id-pkix-ocsp-nocheck exists in the OCSP certificate.

    Id-pkix-ocsp-nocheck in OCSP certificate exists: SSL certificate validation succeeded.
    Id-pkix-ocsp-nocheck not present in OCSP certificate: OCSP Request 2 times request (verification failed).

    Why do IE browsers differ in the validation of SSL certificates according to the id-pkix-ocsp-nocheck extension field in the OCSP certificate?

    Wednesday, July 05, 2017 6:40 AM