certbot申请的证书
your-domain替换成你的域名
查询ocsp地址：
openssl x509 -in /etc/letsencrypt/live/your-domain.com/cert.pem -noout -ocsp_uri
ssl_trusted_certificate配置路径：
ssl_trusted_certificate /etc/letsencrypt/live/your-domain.com/fullchain.pem;
acme.sh申请的证书
查询ocsp地址：
openssl x509 -in ~/.acme.sh/your-domain.com/your-domain.cer -noout -ocsp_uri
ssl_trusted_certificate配置路径：
ssl_trusted_certificate ~/.acme.sh/your-domain.com/fullchain.cer;