needed to integrate code from cfssl and golang.org/x/crypto/ocsp into new pkg/ocsp to be able to add response extensions.
- support multiple issuer certificates - support separate responder keys and certificates - support openssl index.txt format certificate databases