Yes, this is to use OCSP. You do not have to pay if you download revocation lists manually. Ofcourse lists become stale rather quickly. Very basic - hello worl

Yes, this is to use OCSP. You do not have to pay if you download revocation lists manually. Ofcourse lists become stale rather quickly. Very basic - hello world level - implementation is as simple as enabling client certificate authentication in Apache config.