assume SCT is in hash table indexed by certificate fingerprint

axe unnecessary check for prefork-like MPM (we won't invoke executable
on request handling thread)