Fix locking in ssl_cert_dup()