NSS cache workaround
if we reached hostname verification then the chain was already verified