---
title: "OCSP Stapling — Definition | FourSight Glossary"
url: https://foursight.cloud/glossary/ocsp-stapling
description: "An optimization where your server periodically fetches a signed certificate-validity statement from the CA and \"staples\" it to the TLS handshake — avoid…"
lang: en
---

Back to glossary: https://foursight.cloud/glossary

Security & TLS

# OCSP Stapling

An optimization where your server periodically fetches a signed certificate-validity statement from the CA and "staples" it to the TLS handshake — avoiding a separate revocation check from the user's browser.

Source

- IETF — RFC 6066 §8 — Certificate Status Request (https://datatracker.ietf.org/doc/html/rfc6066#section-8)

## Related terms

SSL / TLS

Transport Layer Security (TLS) is the cryptographic protocol that powers HTTPS.
https://foursight.cloud/glossary/ssl-tls

TLS 1.2 vs TLS 1.3

TLS 1.3 (2018) is faster (one round-trip handshake) and more secure (removed legacy ciphers) than TLS 1.2.
https://foursight.cloud/glossary/tls-13

TLS Certificate (Leaf, Intermediate, Root CA)

An X.509 certificate is a signed document binding a public key to a domain.
https://foursight.cloud/glossary/certificate

Certificate Chain

The sequence of certificates linking your server's leaf cert back to a trusted root CA.
https://foursight.cloud/glossary/certificate-chain

Wildcard Certificate

A TLS cert valid for one subdomain level — `*.example.com` covers `api.example.com` but NOT `v2.api.example…
https://foursight.cloud/glossary/wildcard-certificate

Let's Encrypt

A free, automated, non-profit Certificate Authority issuing 90-day TLS certificates.
https://foursight.cloud/glossary/lets-encrypt

## Start monitoring free — HTTP + Ping checks, 4 regions, no card

The Free plan includes 10 monitors with HTTP and Ping checks from all 4 probe regions, 5 minute intervals, email alerts, and 1 status page — $0, no credit card, commercial use allowed. All 8 monitor types unlock on Growth ($40/mo).

- HTTP + Ping checks
- 4 probe regions on every plan
- No credit card

Start monitoring free: https://foursight.cloud/auth?signup=true

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": "DefinedTerm",
    "@id": "https://foursight.cloud/glossary/ocsp-stapling",
    "name": "OCSP Stapling",
    "description": "An optimization where your server periodically fetches a signed certificate-validity statement from the CA and \"staples\" it to the TLS handshake — avoiding a separate revocation check from the user's browser.",
    "url": "https://foursight.cloud/glossary/ocsp-stapling",
    "termCode": "ocsp-stapling",
    "inDefinedTermSet": {
      "@type": "DefinedTermSet",
      "name": "FourSight Monitoring & Reliability Glossary",
      "url": "https://foursight.cloud/glossary"
    },
    "sameAs": [
      "https://datatracker.ietf.org/doc/html/rfc6066#section-8"
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Glossary",
        "item": "https://foursight.cloud/glossary"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "OCSP Stapling",
        "item": "https://foursight.cloud/glossary/ocsp-stapling"
      }
    ]
  }
]
```