AnsweredAssumed Answered

OCSP stapling - check for expiration

Question asked by bob nova on Mar 6, 2015
Latest reply on Mar 10, 2015 by bob nova

My browser (Palemoon) is putting up an error message for a site (technet.microsoft.com).  The error message states:

 

The OCSP response contains out-of-date information.


When I run the site through the ssllabs server test page, all I see is "OCSP stapling - No".   I was hoping that the ssllabs server test page would confirm or deny what Palemoon was saying about expired information in the OCSP response, as Palemoon does have its quirks from time to time.


Does the ssllabs server test site check for out-of-date / expired information in the OCSP response?  Does expired info yield a "no" rating?


Thanks.

Outcomes