we fingerprint the *public* key, not the private one