There is a newer OCSP response but was not provided by the server

[itpp2012]

173279834462 Wrote:
-------------------------------------------------------
> > Though not providing an OCSP response isn't a problem at all 
> > as OCSP stapling is just an optimization, and
> 
> Well. it *is* a problem. 
> 
> Without stapling, each client that hits our server also hits the ocsp
> server. 
> In our case, the ocsp server is overloaded (StartSSL), and therefore

Google "ocsp response caching nginx"
Cache it or prime it (or both).

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,261716,261774#msg-261774