OCSP response field is optional for license response message. The DRM client should not force the license response message to include the OCSP response field. If the OCSP response field is included in the license response message, the DRM client should check the signature of the OCSP response and judge whether the server certificate status is valid. If the OCSP response signature check fails or the server certificate status is invalid, the license response should be considered illegal.
