The only exception is the ikev2/ocsp-no-signer-cert scenario as the pki command won't sign an OCSP response with a certificate that isn't the CA certificate or marked as an OCSP signer.
The only exception is the ikev2/ocsp-no-signer-cert scenario as the pki command won't sign an OCSP response with a certificate that isn't the CA certificate or marked as an OCSP signer.