This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)

  • 2 replies
  • 25 have this problem
  • 1 view
  • Last reply by MikieBeats

MikieBeats
MikieBeats
more options

I first saw this error last night first with tumblr and then tried to go to the mozilla support site to see what the problem is but got the same error. So then with the help of Google, I discovered going into the "about:config" and setting the "security.ssl.enable_ocsp_stapling" to FALSE to work as a temporary fix for my problem and things began to work fine.

Today, I set "security.ssl.enable_ocsp_stapling" back to TRUE but still got the same "Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)" message when opening tumblr and mozilla support.

The solution for most people seemed to be to give it time but I wonder if I'm having a different problem to others since sites like twitter and droxbox appeared broken when I tried opening them. But when "security.ssl.enable_ocsp_stapling" was set to FALSE, they seem to work fine.

I first saw this error last night first with tumblr and then tried to go to the mozilla support site to see what the problem is but got the same error. So then with the help of Google, I discovered going into the "about:config" and setting the "security.ssl.enable_ocsp_stapling" to FALSE to work as a temporary fix for my problem and things began to work fine. Today, I set "security.ssl.enable_ocsp_stapling" back to TRUE but still got the same "Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)" message when opening tumblr and mozilla support. The solution for most people seemed to be to give it time but I wonder if I'm having a different problem to others since sites like twitter and droxbox appeared broken when I tried opening them. But when "security.ssl.enable_ocsp_stapling" was set to FALSE, they seem to work fine.

Chosen solution

An incorrect system clock on your computer can cause OCSP issues.

You can check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar.

You can inspect the certificate chain via a site like this:

Read this answer in context 👍 8

All Replies (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Chosen Solution

An incorrect system clock on your computer can cause OCSP issues.

You can check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar.

You can inspect the certificate chain via a site like this:

MikieBeats
MikieBeats Question owner
more options

Ah, thank you very much for that. Setting the correct date and time solved everything.