curl: add --cert-status option

This enables the CURLOPT_SSL_VERIFYSTATUS functionality.
openssl: add support for the Certificate Status Request TLS extension

Also known as "status_request" or OCSP stapling, defined in RFC6066 section 8.