In ocsp_match_issuerid() we are passed the CA that signed the responder

certificate so need to match its subject with the certificate IDs in the
response.