@chpietsch @ooni we only saw the block of the OCSP service of letsencrypt on one ISP and in a small sample of measurements. It might have been a temporary misconfiguration on the part of the ISP and not an intentional block.