certificate verification against known fingerprint