Function build_ocsp_response 

pub fn build_ocsp_response(
    cert: &OcspCertId<'_>,
    status: OcspCertStatus,
    produced_at: SystemTime,
    validity: Duration,
    sign_tbs: impl FnOnce(&[u8]) -> Result<(OcspSignatureAlgorithm, Vec<u8>), Box<dyn Error + Sync + Send>>,
) -> Result<Vec<u8>, Box<dyn Error + Sync + Send>>

Available on crate feature crypto only.

Build a DER-encoded OCSPResponse attesting cert’s status.

sign_tbs signs the tbsResponseData DER with the issuer key and reports which algorithm it used. produced_at sets producedAt/thisUpdate; nextUpdate = produced_at + validity.

The public surface takes only std time types — time::OffsetDateTime is an internal detail of the DER GeneralizedTime encoding.