Troubleshoot AWS Private CA certificate revocation issues

OCSP response latency

OCSP responsiveness may be slower if the caller is geographically distant from a regional edge cache or from the Region of the issuing CA. For more information about regional edge cache availability, see Global Edge Network. We recommend issuing certificates in a Region near where they will be used.

Revocation of self-signed certificates

You can't revoke a self-signed CA certificate. To functionally revoke the certificate, delete the CA.