Instead of the client phoning the CA's OCSP responder to check revocation, the server staples a recent “not revoked” signature into the handshake. Faster and more private.
OCSP stapling
TLS handshake optimization where the server attaches a fresh revocation proof.