...
The Security Server fetches new OCSP responses using a fixed interval that is 20 minutes by default. The fetch interval is configured on the Central Server using the ocspFetchInterval global configuration parameter extension by the X-Road operator. An OCSP response is considered expired by the Security Server if it was issued too far in the past OR there’s already new status information available.
...
Omitting the nextUpdate attribute is done on the Central Server using the verifyNextUpdate global configuration parameter extension by the X-Road operator.
| Info |
|---|
More information about the |
...