add -badsig option to ocsp utility too.