An attacker has gotten a fraudulent certificate attesting to be for your application server and is planning to intercept your transactions in a man$-$in$-$the$-$middle attack. The certificate has not been revoked yet, but what technology could still let you know something is wrong?

a$.$

Stapling

b$.$

Pinning

c$.$

Extended Validation

d$.$

OCSP