Confirm, administrator
5,526
edits
Changes
Deleted the line about support GET, since Mozilla does not support/use it.
As per the [https://www.cabforum.org/documents.html CA/Browser Forum’s Baseline Requirements]:
# The OCSP URI must be provided in the certificate, except when OCSP stapling is used. (sections 7.1.2.2, 7.1.2.3)
# OCSP Responders SHALL NOT respond “Good” for Unissued Certificates. (section 4.9.10)
# OCSP Responses shall be updated at least every four days and have a maximum expiration time of ten days (section 4.9.10)
