Hot answers tagged


To be clear, the CA (or its delegate) must support (plain) OCSP, but the server must support stapling, either single or multi (aka v2). From at SSLUseStapling, with emphasis added: This option enables OCSP stapling, as defined by the "Certificate Status Request" TLS extension specified in RFC 6066. If ...

Only top voted, non community-wiki answers of a minimum length are eligible