On 13/10/17 12:50, Nikos Mavrogiannopoulos wrote: > Any other > suggestions? Cache the ocsp status in memory, for some time bounded by (but in general we perhaps want less than?) the status validity. -- Cheers, Jeremy