Normalize a pclose to fclose and change the response for an unknown serial to PKI_X509_OCSP_RESP_STATUS_UNAUTHORIZED.