Check SSL cert against blacklist

r? @ab 

cc @ebroder @richo