An OCSP Auth action retrieves the revocation status of an X.509 certificate by sending the
certificate information to a remote Online Certificate Status Protocol (OCSP) responder.
Typically, an OCSP Auth action follows an action that receives an X.509 certificate. Either a
Client Cert Inspection or On-Demand Cert Auth action can receive the X.509 certificate from a
user. Either action populates session variables with data that OCSP Auth uses. Similarly, a
Machine Cert Auth action can receive an X.509 certificate from a machine and populate session