I have the same question ast itplayer: Other than CRL, any other alternative way we can do OCSP validation in the pipeline? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,252893,286405#msg-286405