Hot answers tagged

1

To be clear, the CA (or its delegate) must support (plain) OCSP, but the server must support stapling, either single or multi (aka v2). From http://httpd.apache.org/docs/2.4/mod/mod_ssl.html at SSLUseStapling, with emphasis added: This option enables OCSP stapling, as defined by the "Certificate Status Request" TLS extension specified in RFC 6066. If ...


Only top voted, non community-wiki answers of a minimum length are eligible