Verify certificate without using TLS

[kelson42]

verify-scts, like later versions of openssl s_client, make the check based on certificate material retrieved through TLS. This is great but it would be even greater if we could run that from the certificate itself (of course if the certificate has the proper TLS extensions with SCTs), stored on the local storage.