as of yesterday the proxy can log CT status of backend server
Clean up logic to find SCT list in an OCSP response...

Use NID_ct_cert_scts defined in OpenSSL 1.0.2 beta along with
OCSP_SINGLERESP_get_ext_by_NID instead of looping through all
the extensions and doing a string comparison.