I have attached a patch to add a choice to reshow the cert, since the fundamental problem is that the user could get stuck in a situation where they have to choose to accept a cert they can't see.