Perform SSL blacklist check with a verify_callback

This replaces our preflight check with one that actually tests the SSL certificate being used for the connection.

On OS X, which monkey patches OpenSSL to ignore the results of the SSL `verify_callback`, we print a warning and fail subsequent requests.

We still need tests before this can be merged. Adding this PR now for comments on the rest of the code.