yes apparently i broke OCSP. thanks for the tip i'm fixing it now.

edit: apparently the error lies around certificate transparency and us lacking a public CT log. the security of the connection itself is not impacted, but i'm looking into it.