2 ms·Much of the HSM load within a CA is OCSP signing, not subscriber cert issuance.by woodruffw 2y agoMuch of the HSM load within a CA is OCSP signing, not subscriber cert issuance.