Soft validate with missing cert shouldn't raise error

We should be able to soft validate without an exception being raised, which includes when the certificate is missing. This patch brings the behaviour of that validation inline with the fingerprint validation in the same method. (Returns false for soft validation, raises exception for non-soft validation.)