Which of the following should the security analyst recommend is lieu of an OCSP?