Recommend OCSP stapling for newer Apaches, HSTS header updates