NetAsyncDownloader: Throw MissingCertificateKraken on missing certs.

This means our users get much more useful feedback when they can easily
fix their problem using mozroots.

Fixes #219.