diff --git a/src/ssl_ocsp.c b/src/ssl_ocsp.c
index 5a79d13fa..eb1d17fe6 100644
--- a/src/ssl_ocsp.c
+++ b/src/ssl_ocsp.c
@@ -1727,7 +1727,8 @@ int ocsp_update_check_cfg_consistency(struct ckch_store *store, struct crtlist_e
 
 	if (store->data->ocsp_update_mode != SSL_SOCK_OCSP_UPDATE_DFLT || entry->ssl_conf) {
 		if ((!entry->ssl_conf && store->data->ocsp_update_mode == SSL_SOCK_OCSP_UPDATE_ON)
-		    || (entry->ssl_conf && store->data->ocsp_update_mode != entry->ssl_conf->ocsp_update)) {
+		    || (entry->ssl_conf && entry->ssl_conf->ocsp_update != SSL_SOCK_OCSP_UPDATE_OFF &&
+		        store->data->ocsp_update_mode != entry->ssl_conf->ocsp_update)) {
 			memprintf(err, "%sIncompatibilities found in OCSP update mode for certificate %s\n", err && *err ? *err : "", crt_path);
 			err_code |= ERR_ALERT | ERR_FATAL;
 		}