diff --git a/base/ca/src/main/java/com/netscape/cms/servlet/csadmin/UpdateOCSPConfig.java b/base/ca/src/main/java/com/netscape/cms/servlet/csadmin/UpdateOCSPConfig.java
index 85048355acc..9fb9e1982b3 100644
--- a/base/ca/src/main/java/com/netscape/cms/servlet/csadmin/UpdateOCSPConfig.java
+++ b/base/ca/src/main/java/com/netscape/cms/servlet/csadmin/UpdateOCSPConfig.java
@@ -129,7 +129,7 @@ protected void process(CMSRequest cmsReq) throws EBaseException {
             cs.putString(publisherPrefix+".path", "/ocsp/agent/ocsp/addCRL");
             cs.putString(publisherPrefix+".pluginName", "OCSPPublisher");
             cs.putString(publisherPrefix+".enableClientAuth", "true");
-            cs.putString(rulePrefix+".enable", "true");
+            cs.putString(rulePrefix+".enable", "false");
             cs.putString(rulePrefix+".mapper", "NoMap");
             cs.putString(rulePrefix+".pluginName", "Rule");
             cs.putString(rulePrefix+".publisher", "OCSPPublisher-"+ocspname);
diff --git a/base/server/src/main/java/com/netscape/cms/publish/mappers/LdapSimpleMap.java b/base/server/src/main/java/com/netscape/cms/publish/mappers/LdapSimpleMap.java
index f68bf0c287c..36d824bb826 100644
--- a/base/server/src/main/java/com/netscape/cms/publish/mappers/LdapSimpleMap.java
+++ b/base/server/src/main/java/com/netscape/cms/publish/mappers/LdapSimpleMap.java
@@ -275,7 +275,9 @@ private String formDN(IRequest req, Object obj) throws
                 X509CRLImpl crl = (X509CRLImpl) obj;
                 subjectDN = (X500Name) crl.getIssuerDN();
 
-                logger.warn("LdapSimpleMap: crl issuer dn: " + subjectDN + ": " + e.getMessage(), e);
+                // We know by now that obj is X509CRLImpl instead of
+                //   X509Certificate; no warning needed
+                // logger.warn("LdapSimpleMap: crl issuer dn: " + subjectDN + ": " + e.getMessage(), e);
             } catch (ClassCastException ex) {
                 logger.warn(CMS.getLogMessage("PUBLISH_PUBLISH_OBJ_NOT_SUPPORTED",
                                 ((req == null) ? "" : req.getRequestId().toString())), ex);