diff --git a/.vscode/numbered-bookmarks.json b/.vscode/numbered-bookmarks.json
index 6c14f60..06e7121 100644
--- a/.vscode/numbered-bookmarks.json
+++ b/.vscode/numbered-bookmarks.json
@@ -6,13 +6,13 @@
 				-1,
 				30,
 				44,
-				694,
+				699,
 				-1,
 				-1,
 				-1,
 				-1,
 				-1,
-				686
+				691
 			]
 		}
 	]
diff --git a/setup.sh b/setup.sh
index 56213ec..ecc723e 100755
--- a/setup.sh
+++ b/setup.sh
@@ -656,6 +656,11 @@ if [ "${useSSL}" -eq 1 ]; then
     echo -e "updating ${warn}${configPath}/${file_mozmodern}${norm}"
     sed -i -e "s%${tag_dhparam}%${DHPath}%" "${configPath}/${file_mozmodern}"
     sed -i -e "s%${tag_cachain}%${CAChainPath}%" "${configPath}/${file_mozmodern}"
+    # comment OSCP lines if noOSCP=1
+    if [ "${noOSCP}" -eq 1 ]; then
+        sed 's/^ssl_stapling/#ssl_stapling/g' "${configPath}/${file_mozmodern}"
+        sed 's/^ssl_trusted/#ssl_trusted/' "${configPath}/${file_mozmodern}"
+    fi
 fi
 
 # process LAN IP in nginx.conf