Currently, we cache CRLs in a memory cache and avoid subsequent network downloads if a duplicate request is made within 30 seconds. We should do something similar for OCSPResponses to help improve performance.