perform sanity checks on server certificate type as soon as it is received...

perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange
(backport from HEAD)