OCSP must-staple: free feature of TLS library, works
plain OCSP: hit & miss, depends on the client software using the TLS library correctly
CRL: no.
… that's the crux of this entire thread.