duplicate x509 in mem for delayed verification