certdb: use certutil and match_hostname for cert verification
    
    Use certutil and ssl.match_hostname calls instead of python-nss for
    certificate verification.
    
    Reviewed-By: Christian Heimes <cheimes@redhat.com>