nonce

Use this parameter to set a random Nonce value in each OCSP request. When the OCSP responder responds to a request with the Nonce extension, it must include a copy of the Nonce in the signed response; otherwise, the response will be considered invalid. Therefore, the nonce forces the OCSP responder to generate a fresh OCSP request, which may result in more timely revocation information.