Certutil and OCSP validation
Hi, I have an OCSP responder running and I am trying to verify the status of the certificates with the certutil tool, however we have cases where the response is correct and then the response expires. Or if we consult the same certificate from one computer it indicates verified but if we consult from another computer it responds incorrect. Could you help me with this? Is "certutil" a 100% reliable service? Why is it that when I consult it responds with expired and after several queries it responds with the correct status of the certificate? The response from my OCSP responder is the same for all cases and I can see that the correct status of the certificate is included in the response. I already verified that the nextUpdate field is included in the response, however I still have this intermittency between correct and incorrect answers.