Let's start with:
OCSP response signing is the majority of what our HSMs handle on a daily basis and shedding some load is a good idea.
-@phil
See: Why not revoke a certificate after renewal or end of use?
1 Like