This new feature request is dependent of the implementation of the following that needs to be accomplished before:

https://issues.redhat.com/browse/RHEL-17462

The feature for mod_md that is lacking is that when OCSP reports a revoked status of a certificate, it should trigger a new reissue of a new pair key/certificate on the ACME client, so when mod_md OCSP client observes that a monitored certificate is revoked,
it should attempt to request a new certificate for the managed domain.

Additionally, mod_md could/should generate a new keypair, especially when the OCSP response specifies the keyCompromise revocation reason.

This feature will enable hosts for automatically recover when revoked certificates are observed, that would be really useful for example when a CA revokes a certificate due to a compromise

This is something that have occurred in the past with publicly trusted ACME CAs including Let's Encrypt, and is assumed the same kind of events will occur in the future Examples:

• https://community.letsencrypt.org/t/2022-01-25-issue-with-tls-alpn-01-validation-method/170450
• https://community.letsencrypt.org/t/2023-06-15-certificate-policies-extension-mismatch/200155