set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification