Apache HTTPD mod_nss order of certificate revocation check

Issue

What is the order that mod_nss checks if a client certificate has been revoked? CRL-then-OCSP or vice-versa?

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)