if the ocsp server is blocked by the proxy (it returns http 403 in my case), then mod_ssl should not return any ocsp information if "SSLStaplingReturnResponderErrors off" is set. It returns try_later though despite SSLStaplingReturnResponderErrors set to off.