make certfp do ts6 properly