OCSP stapling

Also written: stapling

The server attaches a fresh, CA-signed OCSP status to its connection, so the client doesn't need to ask the CA itself.