A temporary work around that helped me was to use
sudo route add -net 17.253.17.207 255.255.255.255 -blackhole;
sudo route add -net 17.253.17.202 255.255.255.255 -blackhole;
based on dig +short ocsp.apple.com |grep -E ^[1-9]
17.253.17.207
17.253.17.202
That shortens the delay. Others here found adding ocsp.apple.com to /etc/hosts using a private address also helps. Whichever is easiest for you. To remove: sudo route delete -net 17.253.17.207 255.255.255.255;
sudo route delete -net 17.253.17.202 255.255.255.255;
or reboot.