check_ssl_cert: update to 1.65.0
while here, make curl a dependency (avoid surprising failures) and mark this as NO_ARCH.