nss: do not fail if a CRL is already cached

This fixes a copy-paste mistake from commit 2968f957.