Instead of erroring out completely when it can't determine if the certificate is valid, proceed anyway. This matches how web browsers treat failed cert revocation checks. schannel just has somewhat paranoid defaults.