vtls: have the backend tell if it supports CERTINFO