Comment by blakewatters

OCSP exists because CRLs don’t scale as you build an ever growing list of revoked certificates