DANE: fix type-2xx TLSA under older OpenSSL versions Bug 2198