Is Apple keeping its promises over online OCSP certificate checks?