fn verify_single_res( single_res: &SingleResponse, leaf_cert: &X509Certificate<'_>, issuer_cert: &X509Certificate<'_>, ) -> Result<()>