Summary: checking validity and ocsp-nocheck extension.
Reviewed-by: mullan, vinnie