This verification should only be done for stapled OCSP responses, per https://github.com/mongodb/specifications/blob/master/source/ocsp-support/ocsp-support.rst#suggested-ocsp-behavior the driver should not call out to ocsp endpoints for intermediate certificates.