OCSP certificate common names are currently all localhost (except for the CA, which is Kernel Test CA). We should change the common name and regenerate the certificates so they are easier to find when converted to pfx and saved in the system trust stores.