temporarily replace DNTree with a simpler cert lookup mechanism, fix mitmproxy/mitmproxy#295