OCSP is deprecated for CRLs

Let's encrypt already EOLd OCSP