Not if the last valid OCSP response is stapled to the certificate. Of course, clients can ignore that and use their own revocation lists/logic, which sometimes

Not if the last valid OCSP response is stapled to the certificate. Of course, clients can ignore that and use their own revocation lists/logic, which sometimes get pushed faster than OCSP responses. (Or clients can just block any certificates/CAs they want to, really.)