Perform a much more accurate comparison between two certificates to determine if they are identical when checking their revocation status. Fixes #3237