Add OCSP cache and timeout tuning knobs
    
    NSS provides functions to control the timeout for connecting to
    an OCSP server and for caching the results. This includes the
    number of responses to cache and the duration to cache them.
    
    Based on a patch by Jack Magne