Summary: checking validity and ocsp-nocheck extension.
Reviewed-by: mullan, vinnie

Reviewed-by: xuelei, mullan