Update:
- it works with the iPhone
- it fails with Thunderbird
Update #2:
It works with Thunderbird and the following configuration:
security.OCSP.GET.enabled: true
security.OCSP.enabled: 1
security.OCSP.require: true
security.ssl.enable_ocsp_must_staple: false
security.ssl.enable_ocsp_stapling: true