offline OCSP server

Hi all.

 

 

 

Could anybody help me?

 

 

 

My users usually access their internet banking accounts through browser, using a java applet signed by Verisign.

 

After a recent java update. Every time that this java applet start, it is going to check OCSP (ocsp.verigisn.com).

 

There are several OCSP addresses, like 199.7.51.72, 199.7.71.72, 199.7.57.72, 199.7.55.72, etc. (apparently, a DNS round robin does the rotation job).

 

 

 

But there is an address (199.7.57.72) that is offline for a long time (at least 2 month). Every time my users tries to open web site and java applet is brought online, if he had a bad luck of receive this ocsp address via DNS round robin ( ocsp.verisign.com = 199.7.57.72 ) so he will wait for long minutes until his internet banking becomes available.

 

 

 

My question is: Is this address offline just for me? (I´m the firewall administrator, no blocks on firewall on my side). If not, how can I ask Verisign/Symantec to check this address availability?

 

 

 

Thanks