Use data-url when there is no valid certificate origin

[antiphoton]

• When cert_origin is invalid, (e.g. cert_origin is an empty string),
  • no longer throw "Failed to parse cert origin";
  • fall back to create certificate URL in data scheme, which does not need a domain name.
• Refactor get_unexpired_ocsp() method and add a new parameter certificate to it.