Let's Encrypt has announced their intent to stop providing OCSP service.
This contains a list of known OCSP hostnames as observed by crt.sh.
- VERIFY BEFORE USING, THIS MAY BREAK THINGS
- The file will be periodically updated
- Edit
exclude.txt
to include any exceptions needed - File is formatted to be used as a blocklist
- Ensure that you understand the difference between fail-open and fail-close behavior