Do OCSP checks only if we got issuer_cert.  Closes #756