With Nexus OCSP Responder a client can, via the OCSP responder protocol, receive the status of one or more certificates and get up to date information on their revocation status. For more information about the OCSP protocol, see Introduction to the OCSP protocol. The OCSP protocol is used to get more timely revocation information than is possible with CRLs/CILs and can also be used to obtain additional status information. The OCSP protocol specifies the data that needs to be exchanged between an application checking the status of a certificate and the server providing that status.

...

Features

Nexus OCSP Responder is Common Criteria EAL4+ certified according to the international standard Common Criteria EAL4+ for Information Technology Security Evaluation (CC). 

...