The End of Revocation Caching

Early versions of this service attempted to maintain massive, highly-available caches of CRLs and OCSP responses (using AWS ElastiCache). This proved to be an infrastructural black hole. The VSS architecture has since evolved to shed this technical debt, relying entirely on the native JRE PKIX engine for EE validation and leaning into the industry push for shorter certificate lifetimes.