Fixes for cert exchanges closes #1594

This fixes the immediate issue. There is a remaining issue with kscope ads sometimes not being delivered, which manifests itself as SSL errors, but we'll log that separately.
Per the documentation for java.util.Set, this remove is redundant.  What did you observe that led you to add it?