OCSP is the on-line certificate status protocol. It is used to determine the validity
of a given certificate. An error exists in the OCSP client implementation such that
certain OCSP requests are immediately rejected by the OCSP server.

The error occurs during validation of a certain class of certificates: those that
have been issued by a CA that is not a root CA. A root CA has a certificate where
the subject name and issuer name are identical. OCSP validation requests for
certificates issued by root CAs do not exhibit the problem.

When the error occurs, the OCSP validation request is encoded incorrectly and the
request is subsequently rejected by the OCSP server.