This causes problems with weechat and dovecot. Those certificates are short-lived, so not having OCSP stapling is probably fine.