Step 1
Follow the instructions in this support article to change your DNS settings. If there's no change, revert the settimgs.
Step 2
Launch the Keychain Access application. In the Keychains list, there should be an item named System. If not, select
File ▹ Add Keychain
from the menu bar and add the following item:
/Library/Keychains/System.keychain
From the Category list in the lower left corner of the window, select Certificates. Look carefully at the list of certificates in the right side of the window. If any of them has a a blue-and-white plus sign or a red "X" in the icon, double-click it. An inspection window will open. Click the disclosure triangle labeled Trust to disclose the trust settings for the certificate. From the menu at the top, select
When using this certificate: Use System Defaults
Close the inspection window. You'll be prompted for your administrator password to update the settings. Revert all the certificates with non-default trust settings.
From the menu bar, select
Keychain Access ▹ Preferences ▹ Certificates
There are three menus in the window. Change the selection in the top two to Best attempt, and in the bottom one to CRL.
Next, select the login keychain. Delete any expired or otherwise invalid certificates.
Log out, log back in, and test.
Step 3
Launch the Activity Monitor application. Select All Processes from the menu in the toolbar of the Activity Monitor window, if not already selected. Enter "ocspd" (without the quotes) in the "Filter" text field. Is a process with that name listed?
If not, back up all data, then triple-click anywhere in the line of text below on this page to select it:
/var/db/crls
Copy the selected text to the Clipboard (command-C). In the Finder, select
Go ▹ Go to Folder...
from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.
Move all the files in the folder that opens to the Trash. You’ll be prompted for your administrator password. Reboot, empty the Trash, and test.
