OCSP stapling resolves both the security and privacy issues of current OCSP implementations, because the client no longer contacts the CA’s OCSP responder directly. Instead, the HTTPS server queries ...