diff --git a/conf.d/10-defaults.conf.template b/conf.d/10-defaults.conf.template
index 60c3868..def6e30 100644
--- a/conf.d/10-defaults.conf.template
+++ b/conf.d/10-defaults.conf.template
@@ -4,10 +4,12 @@ ssl_session_cache shared:SSL:10m;
 ssl_session_timeout 10m;
 ssl_session_tickets off;
 
-ssl_stapling on;
-ssl_stapling_verify on;
-resolver 1.1.1.1 8.8.8.8 valid=300s;
-resolver_timeout 5s;
+# OCSP stapling requires certificates with an OCSP responder URL.
+# Uncomment when the origin certificate supports it.
+# ssl_stapling on;
+# ssl_stapling_verify on;
+# resolver 1.1.1.1 8.8.8.8 valid=300s;
+# resolver_timeout 5s;
 
 server {
     listen 80 default_server;