Recommendation [ edit ]

Either disable OCSP, or require it.