 in <i>bs</i> unless <i>flags</i> contains <b>OCSP_NOINTERN</b>. It fails if the signer certificate cannot be found. Next, unless <i>flags</i> contains <b>OCSP_NOSIGS</b>, the function checks the signature of <i>bs</i> and fails on error. Then the function already returns success if <i>flags</i> contains <b>OCSP_NOVERIFY</b> or if the signer certificate was found in <i>certs</i> and <i>flags</i> contains <b>OCSP_TRUSTOTHER</b>. Otherwise the function continues by validating the signer certificate. If <i>fla