My concern is that this scenario is a bit like a telephone being configured with all the PABXs it can talk to. 3.4 Updates - What does the client do if next update is set to an hour or so infront of the current time. The client must check that if the OCSP server signature is not that of the cert issuer, then it must check the OCSP server cert to see if the extended key usage is set and the the fact that the OCSP server cert's Issuer CA is a valid signature for the OCSP server's cert. Otherwise the text has no substance. This does represent a scaling issue in the making.
Thoughts are welcome.