Use cert tables in ssl_set_sig_mask