Cipherscan fixes

 * reduce forks to make the script faster
 * implement caching of ca certificates, saving of end entity certificates
 * don't retry connections to server with given protocol version if it refused it previously