ed in the check. If <i>maxsec</i> is positive it indicates the maximum age of <i>thisupd</i> in seconds.</p>

<p>OCSP_basic_verify() checks that the basic response message <i>bs</i> is correctly signed and that the signer certificate can be validated. It takes <i>st</i> as the trusted store and <i>certs</i> as a set of untrusted intermediate certificates. The function first tries to find the signer certificate of the response in <i>certs</i>. It then searches the certificates the responder may have included