Honestly? I don't think it makes sense for us to continue down the path where the clients connect to the CA to verify status. While I trust most CAs (like LE),

Honestly? I don't think it makes sense for us to continue down the path where the clients connect to the CA to verify status. While I trust most CAs (like LE), the less information a client has to expose to one the better.