OCSP stapling improves TLS handshake performance and privacy by
having the server provide certificate revocation status directly,
so clients don't need to query the CA separately.
Replace the 404 response on port 80 with a 301 redirect to the
equivalent HTTPS URL, so users who type http:// are seamlessly
upgraded to a secure connection.
lingkai5wu