Refactor verify.rs list_cert_dns_names to avoid allocations.

[cpu]

It feels possible to refactor the verify.rs's list_cert_dns_names function added in #42 to lean heavier on iterators and to avoid allocation to a Vec. This would let us expose this functionality without depending on the alloc feature.