Fixed setting serial numbers for certificates, wild stab at OCSP.
Do not set OCSP for self-signed certificates.