Wait, what ? Mozilla is taking already more than 8 years to add SHA-2 support to mozilla::pkix's OCSP implementation ? This saddens me, the devs seem overloaded. As the only other open alternative to Chrome based browsers I hope they can stay current.