Yes, I'm trying to staple the ocsp response.
The curl output:
# curl -v http://r3.o.lencr.org/
* Expire in 0 ms for 6 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 0 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 1 ms for 1 (transfer 0x557274b02f90)
* Expire in 4 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 2 ms for 1 (transfer 0x557274b02f90)
* Expire in 4 ms for 1 (transfer 0x557274b02f90)
* Expire in 3 ms for 1 (transfer 0x557274b02f90)
* Expire in 3 ms for 1 (transfer 0x557274b02f90)
* Expire in 4 ms for 1 (transfer 0x557274b02f90)
* Expire in 4 ms for 1 (transfer 0x557274b02f90)
* Expire in 4 ms for 1 (transfer 0x557274b02f90)
* Expire in 8 ms for 1 (transfer 0x557274b02f90)
* Expire in 5 ms for 1 (transfer 0x557274b02f90)
* Expire in 5 ms for 1 (transfer 0x557274b02f90)
* Expire in 8 ms for 1 (transfer 0x557274b02f90)
* Expire in 5 ms for 1 (transfer 0x557274b02f90)
* Expire in 5 ms for 1 (transfer 0x557274b02f90)
* Expire in 8 ms for 1 (transfer 0x557274b02f90)
* Expire in 7 ms for 1 (transfer 0x557274b02f90)
* Expire in 7 ms for 1 (transfer 0x557274b02f90)
* Expire in 9 ms for 1 (transfer 0x557274b02f90)
* Trying 23.55.163.58...
* TCP_NODELAY set
* Expire in 149986 ms for 3 (transfer 0x557274b02f90)
* Expire in 200 ms for 4 (transfer 0x557274b02f90)
* Connected to r3.o.lencr.org (23.55.163.58) port 80 (#0)
> GET / HTTP/1.1
> Host: r3.o.lencr.org
> User-Agent: curl/7.64.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Server: nginx
< Content-Length: 0
< Cache-Control: max-age=20211
< Expires: Thu, 07 Jan 2021 21:26:32 GMT
< Date: Thu, 07 Jan 2021 15:49:41 GMT
< Connection: keep-alive
<
* Connection #0 to host r3.o.lencr.org left intact
I'm thinking this may have something to do with the MTU size and the path along the way.
To see if the problem is with that destination network, you could (temporarily) try to use a different IP for ocsp.int-x3.letsencrypt.org & r3.o.lencr.org.