We could have just fixed OCSP stapling instead. Or better yet scrap the CA nonsense entirely and just use DANE.