Implications setting com.glide.communications.httpclient.verify_revoked_certificate to falseIssue <!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Outgoing web service requests are failing with "org.apache.commons.httpclient.HttpException: No issuer certificate found <endpoint FQDN or certificate subject>" error against an endpoint which is configured with self-signed or expired certificate. Set or create the property com.glide.communications.httpclient.verify_revoked_certificate to false as advised on KB0760206 Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All Cause<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Although it should work as expected. If you give "com.glide.communications.httpclient.verify_revoked_certificate" property value to False it will skip the verification process of the certificate and is not advisable to set this property as false in the production instance. KB0760274 mentions other system properties related to this feature The certificate check is a revoke check using OCSP which generates an outbound call to the certificates OCSP authority to verify that the certificate has not been revoked. See External Online Certificate Status Protocol pages for more information on OCSP The certificate check is performed against the outbound calls endpoint during the SSL handshake. This is not a check of the instance's own certificates. Using self signed certs is permissible if customer is signed by a CA, the CA can be self signed as well, but the server cert must be added to the Trust Store via certificate management. Additionally there must be at least 1 issuer in the certificate chain (Subject->Issuer/Subject-> CA). The OCSP check will only be performed if the certificate is configured for OCSP." In NewYork version, we have enhanced the certification validation functionality, during this validation if any of the existing/new certificates is not as per the required standard then the instance will throw the error and handshake won't happen between instance and endpoint, that's the reason in NewYork instance it's throwing the error "No issuer certificate found for END_POINT_NAME" . As mentioned in the KB, "the ultimate solution is to install a valid, and trusted certificate on the external endpoints" Resolution<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } This system_property was introduced in London in response to PRB1291132 and its related article is available as KB0727750 com.glide.communications.httpclient.verify_revoked_certificate set to value "false" will disable the certificate check. ServiceNow would not recommend using it in a Production environment. This is intended just as a work around regarding Sub Production environments to enable testing. For example, when connecting/calling outbound webservices, in case the webservice consumer uses the certificate allowing to connect to all certs in the cert chain by checking the not checking the revocation status. Tighten security from NY release forces by default to check server certificate revocation agains CA authority issuer certificate. For this purpose the instance http connection expects from the endpoint to present the server certificate as well as the CA issuer certificate. The implication of using this property to false is that the instance will not do revoked certificate checks on outbound calls. This would be the same as the preexisting behavior before they upgraded to NewYork and the instance started trying to do the revoke check. The verify host check being disabled in the instance prevented the verify revoked check from happening