Alternatively we could get shorter lifetime certificates. I hope for a day where ocsp becomes unnecessary because certs are only valid for a day or two.