actually do certfp ts6 properly and not just say we do