in case someone missed this

[Stefan Eissing]

The OCSP weaknesses in our server as experienced during the LetsEncrypt server 
outage:
https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html