033530A5 Nonce in OCSP response does not match value in OCSP request

Explanation

When validating the nonce in the OCSP response, the value did not match the value sent in the OCSP request.

User response

If OCSP is enabled for the dedicated OCSP responder, ensure that the OCSP responder server is configured to send a nonce in OCSP responses.

Ensure that nonce checking is required. If not required, set ocspCheckNonce to FALSE within the gskdb_ocsp_source structure provided on the gsk_create_revocation_source() routine.

Collect a System SSL trace containing the error and then contact your service representative if the error persists.