p11_child: make sure OCSP checks are done
If CERT_VerifyCertificateNow() is used with
'certificateUsageCheckAllUsages' OCSP checks are skipped even if OCSP
was enabled.
This patch calls CERT_CheckOCSPStatus() explicitly if OCSP checks are
enabled.
Related to https://pagure.io/SSSD/sssd/issue/3560
Reviewed-by: Fabiano FidĂȘncio <fidencio@redhat.com>