The OpenCA product in its current version has memory leaks and doesn't work with Cisco devices. We just need a small implementation that we can do ourselves either on RHEL or Windows Server or locate a service provider that can do OCSP. We're our own CA so we have that covered.