When I run Get-Ca | Get-EnterprisePKIHealthStatus -Debug -Verbose I receive the attached error. I'm running this command from an elevated PowerShell session on Windows 8.1 Enterprise. My PKI consists of an offline root ca and an enterprise sub-ca
Comments: I too am getting an error that the OCSP response has an invalid signature, using the debug version posted here. I used the commands shown at http://www.sysadmins.lv/blog-en/ocsp-client-tool-advanced-stuff.aspx to just verify the OCSP response, and it too says the signer certificate is valid, but signature is invalid. Testing with openssl says the signature is valid, so I'm leaning towards it being a bug in this library (though it's certainly still a possibility that something is wrong with my OCSP setup).
Comments: I too am getting an error that the OCSP response has an invalid signature, using the debug version posted here. I used the commands shown at http://www.sysadmins.lv/blog-en/ocsp-client-tool-advanced-stuff.aspx to just verify the OCSP response, and it too says the signer certificate is valid, but signature is invalid. Testing with openssl says the signature is valid, so I'm leaning towards it being a bug in this library (though it's certainly still a possibility that something is wrong with my OCSP setup).