On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples