After some recent certificate revocations in your enterprise PKI, you are reviewing how systems identify whether a presented certificate is revoked. You want to ensure results aren't outdated, but want to minimize the traffic impact on CA services. What technology can you use? Choose the best response.

a$.$

CRL

b$.$

Public key pinning

c$.$

CSR

d$.$

OCSP $?$ with stapling