Add certfp support. Closes GH-468.