crl.cacert.org and ocsp.cacert.org provide CRLs ocsp.cacert.org provides OCSP (soon).