Fix NULL dereference in SSL_check_chain() for TLS 1.3