RAPPS Certificate pinning is broken

Rapps Certificate 'pinning' is completely broken:

1. We open a NEW connection to request the certificate
2. The certificate is checked for ISSUER and SUBJECT INFO
3. If a field we want to check is not present, we do not care
4. Wrong types are used, cast to whatever we need

Each of these points on their own is already enough to make it completely not work,
and the second point is why we cannot download files with LE certificates.