Response Validity (Seconds)
Default response validity, used for CAs signing their own responses or when not set in the aliases. 0 means that no validity is set. Note that a validity is required for pre-produced OCSP responses.
Max-Age HTTP header (Seconds)
Default caching time in the response HTTP headers. Used for CAs signing their own responses or when not set in the aliases. 0 means that no time is set, and ignored if the Response Validity is set to 0. Note that for responses of certificates with unknown status, the HTTP response header "Cache-control" will not contain the max age, but "no-cache, must-revalidate" instead. That is to prevent caching of UNKNOWN statuses.
Use Max-Age for Expired Responses
Base cache header on max-age instead of than nextUpdate for expired entities globally. Only used if Max-Age is set to other than 0. Note that this is not in compliance with RFC 5019.