ocsp_verify
if ((ret = ocsp_verify(NULL, bs, signer, flags)) <= 0)
if ((ret = ocsp_verify(req, NULL, signer, flags)) <= 0)