diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index cc4d4f39..59904dbc 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -1339,10 +1339,8 @@ media.masto.nu
 o.n1mp.org
 
 # >> OCSP & Cert Public Key
-r3.o.lencr.org
 ocsp.digicert.com
 cacerts.digicert.com
-ocsp2.apple.com
 ocsp.sectigo.com
 crl.usertrust.com
 crt.comodoca.com
@@ -1350,10 +1348,14 @@ crl.verisign.com
 ocsp.godaddy.com
 crt.usertrust.com
 ocsp.usertrust.com
-ocsp.globalsign.com
-ocsp2.globalsign.com
+
+# Cloudflare China CDN
+# ocsp.globalsign.com
+# ocsp2.globalsign.com
+
 # https://letsencrypt.org/docs/lencr.org/
 .lencr.org
+r3.o.lencr.org
 
 # >> CORS Proxy
 .corsproxy.io
diff --git a/Source/non_ip/domestic.conf b/Source/non_ip/domestic.conf
index 6b56c1fe..aa0bb89d 100644
--- a/Source/non_ip/domestic.conf
+++ b/Source/non_ip/domestic.conf
@@ -574,6 +574,8 @@ DOMAIN-SUFFIX,ntp.org.cn
 DOMAIN-SUFFIX,nubia.cn
 DOMAIN-SUFFIX,nubia.com
 DOMAIN,ocsp.digicert.cn
+DOMAIN,ocsp.globalsign.com
+DOMAIN,ocsp2.globalsign.com
 DOMAIN-SUFFIX,onlinedown.com
 DOMAIN-SUFFIX,openinstall.io
 DOMAIN-SUFFIX,oray.com