SSLStapling On; SSLStaplingStandardCacheTimeout 3600 (after one hour a new ocsp request is being done by mod_ssl) When the OCSP responses from the cache expire, it should go fetch a fresh OCSP response from the OCSP responder even though it still has some cycles to hit the SSLStaplingStandardCacheTimeout; but it keeps serving the expired response from the cache.