explicitly state we have the sha-256 fingerprint of the certs