remove early idiocy
proxy (TLS client): access OCSP response