Fix proxy certificate pathlength verification