fn verify_ocsp_signature( basic_response: &BasicOcspResponse, issuer_cert: &X509Certificate<'_>, ) -> Result<()>