Add OCSP softfail option