Remove OCSP recommendation

[Gunni]

OCSP is being sunset for Let's Encrypt this year (2025).

https://letsencrypt.org/2024/12/05/ending-ocsp/

Generated config should not add OCSP config.

• January 30, 2025
  • OCSP Must-Staple requests will fail, unless the requesting account has previously issued a certificate containing the OCSP Must Staple extension
• May 7, 2025
  • Prior to this date we will have added CRL URLs to certificates
  • On this date we will drop OCSP URLs from certificates
  • On this date all requests including the OCSP Must Staple extension will fail
• August 6, 2025
  • On this date we will turn off our OCSP responders

[gstrauss]

Thank you for the note.

OCSP support will probably not be removed from the SSL config generator, though we may consider unchecking the option box by default rather than the current default of enabling OCSP in the configs.