When list of signature certificates is processed any of them can result with not using a cache while download, which is bad situation.

Just ignore bad certificates while checking the list, so any other good ones can be used.