clean target should remove .libs too
find and log an SCT List in a stapled OCSP response; log when cached validation result is bad