Do OCSP checks only if we got issuer_cert. Closes #756