Keychain Access: OCSP and CRL Certificates choices dimmed in Mac OS X v10.6
In Keychain Access Preferences, under the Certificates pane, the "Online Certificate Status Protocol (OCSP)" and "Certificate Revocation List (CRL)" pop-up menu choices for "Require If Cert Indicates" and "Require for All Certs" may be dimmed.
This article has been archived and is no longer updated by Apple.
Option-click the pop-up menu to select "Require If Cert Indicates" or "Require for All Certs".
Certificate validation may not work if the OCSP and CRL pop-up menus are set to "required" and OCSP or CRL are not available or reachable; for example, if the computer is not connected to a network or is behind a firewall that restricts access. Option-click the pop-up menus as described above.