OpenSSL: better debug info for OCSP