Allow revocation check to succeed if the revocation status cannot be determined for one of the following reasons:
- The CRL or OCSP response cannot be obtained because of a network error.
- The OCSP responder returns one of the following errors specified in section 2.3 of RFC 2560: internalError or tryLater.
Note that these conditions apply to both OCSP and CRLs, and unless the
NO_FALLBACK option is set, the revocation check is allowed to succeed only if both mechanisms fail under one of the conditions as stated above. Exceptions that cause the network errors are ignored but can be later retrieved by calling the
getSoftFailExceptions method.