tell how to configure CTLogPublicKeys for verifying SCT signatures