* cert.c (get_cert): Properly chase down CNAMEs pointing to CERTs.