Facing issue after update certificate

[prakasa-tkpd]

We just updating certificate which will be expired. But somehow after doing that, we facing issue like message below:

2022/07/14 16:56:08 Updating cert if necessary
2022/07/14 16:56:08 Certfetcher is not set, skipping cert updates. Checking cert on disk if updated.
2022/07/14 16:56:08 Updating OCSP; none cached yet.
2022/07/14 16:56:08 Updating OCSP; none cached yet.
2022/07/14 16:56:08 Updating OCSP; none cached yet.
2022/07/14 16:56:08 OCSP nextUpdate 2022-07-21 06:27:00 +0000 UTC too far ahead of thisUpdate 2022-07-14 00:00:00 +0000 UTC

Based on the code the message is coming from this code below:

amppackager/packager/certcache/certcache.go

Line 673 in 9cd448f

if resp.NextUpdate.Sub(resp.ThisUpdate) > time.Hour*24*7 {

Is there any clue why this issue appears ?

[banaag]

Thank you for reporting this issue. We believe this problem is due to some issue with the OCSP being issued by the Cert Authority (CA). Which CA are you currently using?

[glebarsccmbg]

Same issue is happening to me right now on 2 certificates I just reissued with DigiCert.

It also happened last june, I had to wait a few hours/days for it to be okay.