Support cert checking without cgo