gnutls_certificate_verify_peers2() checks ocsp status response if available.