Fix CVE-2013-4073 - handling of certs with null bytes