anchor.diff:  		  :q (gethash :dsa-q signing-certificate)
   		  :g (gethash :dsa-g signing-certificate)
   		  :y (gethash :dsa-public-key signing-certificate))))
  -	   (multiple-value-bind (asn-type dss-sig-value) (parse-der signature)
  +	   (multiple-value-bind (asn-type dss-sig-value) (ocsp-catch-asn-error
  +							  (parse-der signature))
   	     (unless (and (eql asn-type :sequence)
   			  (= (length dss-sig-value) 2))
   	       (return-from verify-ocsp-signature nil))
  
positive.code: 	:accessor log-info)))
  
  (defparameter *id-ad-ocsp* '(1 3 6 1 5 5 7 48 1))
  
  ;; CertID          ::=     SEQUENCE {
  ;; 	hashAlgorithm       AlgorithmIdentifier,
  
negative.code: 	       (error 'ocsp-error :log "Unknown OCSP response type"))
  	     (setf response
  		   (multiple-value-list
  		    (ocsp-catch-asn-error (parse-der (second response) :mode :serialized))))
  	     (unless (asn-type-matches-p :sequence response)
  	       (fail))
  	     (setf response (ocsp-catch-asn-error (asn-sequence-to-list (second response)
  						  :mode :serialized)))
  	     (unless (<= 3 (length response) 4) (fail))
  	     (destructuring-bind (response-data signature-algorithm
  				  signature &optional certs) response
  	       (setf signature-algorithm
  		     (ocsp-catch-asn-error
  		      (asn-sequence-to-list (second signature-algorithm))))
  	       (unless (and (asn-type-matches-p :sequence response-data)
  			    (asn-type-matches-p :bit-string signature))
  		 (fail))
  