GlobalSign’s efforts as a root certificate authority have gone TITSUP this afternoon – that’s a total inability to support usual protocols.
The result is that many websites big and small have had their HTTPS certificates incorrectly scrapped, meaning that for some people their browsers no longer trust websites and refuse or are reluctant to access them.
How to flush OCSP cache on OSX:
sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp;'
How to flush OCSP cache on Windows:
certutil -URLcache * delete
Leave a Reply