Fix header file layout
Convert some pairfind calls to pairfind_da calls
pairfind_da -> pairfind_by_da
disable softfail by default (in line with documentation)
add HTTP Host: header in OCSP request