diff --git a/systemd/incubating/freeipa/freeipa.md b/systemd/incubating/freeipa/freeipa.md
index cf4965d..9ca12ce 100644
--- a/systemd/incubating/freeipa/freeipa.md
+++ b/systemd/incubating/freeipa/freeipa.md
@@ -300,6 +300,15 @@ openssl x509 -in reese-crt.pem -text -noout
 openssl x509 -outform der -in reese-crt.pem -out reese-crt-der.cer
 ```
 
+OCSP Server
+
+<https://bhashineen.medium.com/create-your-own-ocsp-server-ffb212df8e63>
+
+```bash
+openssl req -new -nodes -out ocspSigning.csr -keyout ocspSigning.key
+openssl ca -keyfile rootCA.key -cert rootCA.crt -in ocspSigning.csr -out ocspSigning.crt -config validation.conf
+```
+
 ### PIV Smart Card (Taglio) WIP
 
 <https://github.com/OpenSC/OpenSC/wiki/Using-pkcs11-tool-and-OpenSSL>