configure the log id alongside the public key, use it to pick the right public key when validing the signature of SCTs

fail the connection if we only had failed validations