Openssh also supports OCSP, which can be used to more efficiently manage revoked certificates.