cert-cache: Prevent that a cached issuer is freed too early