instead of bailing out, try all the trust anchors with given distinguish...

...ed name

fixes #55