Support retries in certificate callback