> If the latest OCSP staple indicates that a revocation, Caddy automatically replaces the certificate with a new one.