Hoike, an OCSP Responder Built for Private PKI

Why it surfaced

Hoike treats certificate-status infrastructure as a carefully engineered systems problem: keyless edge nodes serve sealed bundles, air-gapped deployments can move them by removable media, and ML-DSA post-quantum signing is supported alongside familiar algorithms. Its docs expose the architecture, RFC coverage, API, source, and a concrete command-line quick start rather than hiding behind a vague product page.

A Rust-based certificate-status responder that pre-signs OCSP responses, separates signing from edge serving, and supports multiple certificate authorities.