I saw that the privacy policy mentions the OCSP system/servers: letsencrypt.org Privacy Policy The Let’s Encrypt Privacy Policy describes how we collect, use, and disclose your information in three different contexts: When, as a Relying Party, you visit a web site secured with HTTPS that uses a certificate from Let’s Encrypt, When you are a... even tough they were closed down at august 2025: letsencrypt.org Ending OCSP Support in 2025 Earlier this year we announced our intent to provide certificate revocation information exclusively via Certificate Revocation Lists (CRLs), ending support for providing certificate revocation information via the Online Certificate Status Protocol... I can see that it was "last updated" before the close down of OCSP servers aswell. So maybe, remove the whole portion for the Relying party. Also, the "Subscriber" portion mentions the option of giving email adress: " You may have the option --> without your consent." which IMHO should be removed completely as the account system does not store emails anymore at all: Support Ended for Expiration Notification Emails API Announcements L… So the privacy policy really needs to be updated after OCSP shutdown and expiry notification shutdown. 1 post - 1 participant Read full topic