server.common.openssl.verify accepts Certificates.

The work I did in the parent commit didn't get the API quite right. This
commit corrects the API.