Drop incorrect id == -1 case from X509_check_trust