bug 1002814 - OCSP requests: long serial check should be on cert, not issuerCert r=briansmith