fix cert fingerprint handling

thanks @zwily for the catch