tls_field_from_dn() fix for custom out separator

Fixes a bug in ${certextract ...} clause when handling custom separator for RFC4514 DN.
Example:
${certextract{subject,>/}{$tls_in_ourcert}}
Exim process gets SIGSEGV due to strlen(NULL) call (match == NULL).