certs: Cache certs once again (at the end of the verification process). It looks like I accidentally broke this (libpurple wouldn't replace a cert already in the cache) when extending the invalidity reasons.