title: Verifying a certificate with Verisign OCSP Server
body: <p>I'm attempting to use Verisign's OCSP server to verify a certificate that it has issued, for example, amazon.com</p>
  
  <p>I have the issuer certificate (which was rather hard to find). As well as the amazon 0 certificate. I'm using openSSL but I don't seem to be able to get the right OCSP responder certificate to verify the response.</p>
  
  <pre><code>openssl ocsp -issuer test4-May2009Oc2010.cer -CAfile veri-ssp-intermediate-ca.crt -nonce -cert amazon0.crt -url http://ocsp.verisign.com
  </code></pre>
  
  <p>And this is the response:</p>
  
  <pre><code>WARNING: no nonce in response
  Response Verify Failure
  140735084268796:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:122:Verify error:unable to get local issuer certificate
  amazon0.crt: good
      This Update: Jan 19 00:24:56 2011 GMT
      Next Update: Jan 26 00:24:56 2011 GMT
  </code></pre>
  
  <p>Any suggestions as to where the correct certificate for the OCSP responder might actually be?</p>