first = OCSP_resp_find(bsr, certid, -1);