You need to add the -no_nonce option to OpenSSL.
-no_nonce
Microsoft OCSP server doesn't support nonce in the requests.