Run hash, signature and certificate validations only if response code is ok, because other responses dont have signature in them