iPXE bundling certificate chains for chainbooting HTTPS resources

[CMCDragonkai]

So disabling OCSP is the solution?

But I'm not actually using my own custom certificate. I'm using the cacert provided to Linux distros, or even curls' certificate distribution. My question, is why these don't work automatically for HTTPs connections.

Do you have a link to the mailing list answer somewhere? I'd like to see how they do that step by step, and compare it to the curl certificate generation process.