anchor.diff:  	  (unless (= 0 (first response-bytes))
   	    (fail))
   	  (setf response-bytes (multiple-value-list
  -				(parse-der (second response-bytes))))
  +				(ocsp-catch-asn-error (parse-der (second response-bytes)))))
   	  (unless (asn-type-matches-p :sequence response-bytes)
   	    (fail))
   	  (setf response-bytes (second response-bytes)))
  
positive.code: 	  ;; Verify that next-update is greater than the current time.
  	  (when next-update
  	    (unless (eql (first next-update) 0) (fail))
  	    (setf next-update (multiple-value-list (parse-der (second next-update))))
  	    (unless (asn-type-matches-p :generalized-time next-update)
  	      (fail))
  	    (setf next-update (asn-time-to-universal-time (second next-update)))
  
negative.code: 	   (unless (= (aref signature 0) 1)
  	     (return-from verify-ocsp-signature nil))
  	   (setf signature (subseq signature (1+ (position 0 signature))))
  	   (multiple-value-bind (asn-type digest-info) (ocsp-catch-asn-error
  							(parse-der signature))
  	     (unless (and (eql asn-type :sequence)
  			  (= (length digest-info) 2))
  	       (return-from verify-ocsp-signature nil))
  