check extended certificate slow
Hello,
I noticed that it takes 10-15 seconds to check online our extended certificate - site https://secure.ecopayz.com/. Site loads 3-4 seconds when I removed check box "Use the Online Certificate Status Protocol (OCSP) to confirm current validity of certificates". By default, this check box is enabled in Firefox.
Could you please recommend a way to improve speed without removing the check box?
Thanks, Andrei
Chosen solution
I have tried to refresh the page at least 30 or 40 times and almost always the page loaded quickly, only one or two times it took more time. So it is not easy to catch this in the first place.
Are you using IPv6?
Skaityti atsakymą kartu su kontekstu 👍 0All Replies (5)
I've reloaded the page a few times via Ctrl+F5 and most of the time the page loads in 1 or 2 seconds (400-700 ms for the initial response; 2.6 sec for full load).
Only 1 or two times it took more times (5 sec), so it could be that the server responds slowly in some cases.
I wasn't able to catch a slow response in the network monitor of the current Nightly build, but most of the time appears to be waiting for the server.
Hello, Thank you for post. I would like to add few more details about steps to reproduce: 1. Please try to close browser,open it and open URL https://secure.ecopayz.com/ - first time always take more than 10 seconds. 2. Please check that check box "Use the Online Certificate Status Protocol (OCSP) to confirm current validity of certificates" is Enabled.
Thanks, Andrei
This time I managed to get a catch of a slow load and that indicated a problem with the DNS look up.
Hi cor-el, Thank you for one more check.
I tested DNS speed by using few online tools - average response 100-200 ms.
Did you try to open https://secure.ecopayz.com/ with disabled check box: "Use the Online Certificate Status Protocol (OCSP) to confirm current validity of certificates"
Thanks, Andrei
Chosen Solution
I have tried to refresh the page at least 30 or 40 times and almost always the page loaded quickly, only one or two times it took more time. So it is not easy to catch this in the first place.
Are you using IPv6?