In ocsp_match_issuerid() we are passed the CA that signed the responder