As mentioned above, DoD uses smart strategies around certificate validation. CDNs + Localized OCSP + Tactical OCSP + Smart OCSP Clients + Network caching + OCS

As mentioned above, DoD uses smart strategies around certificate validation. CDNs + Localized OCSP + Tactical OCSP + Smart OCSP Clients + Network caching + OCSP & CRLs on the filesystem, just to name a few (not including delta CRLs and other solutions). The DoD OCSP Responders are configured to share hash sets with downstream OCSP Responders & Repeaters, which makes promulgation particularly easy.