OCSP stapling: slight simplification to some internal interfaces, add a few comments and sanity checks