News for hackers. Stuff that matters.

AndresAlla

You mean something like https://www.robotmuralist.com/ but for bubblewrap instead of graffiti on walls? Lot of R&D could be shared, I guess.
Yes, this is to use OCSP. You do not have to pay if you download revocation lists manually. Ofcourse lists become stale rather quickly.

Very basic - hello world level - implementation is as simple as enabling client certificate authentication in Apache config.