Ocsp setup for Vault

I have vault setup running in container for PKI Secrets Engine and would like to add OCSP support for application to check if certificate is not revoked. I didn’t find any explanation on how to setup OCSP for vault als not clear information in any of the blogs.

In my setup I have configure following for CRL

vault write pki/config/urls \
        issuing_certificates="" \

But nothing beyond this for OCSP

Do I need to setup separate service for OSCP or Vault can handle this itself ?

Any help on this to understand OCSP for Vault would be appreciated ?