fingerprint stuff, tlsext_debug_callback

we need the TLS debug callback to determine CT-awareness
of peer when the session is resumed, so restore it

get fingerprint of server cert at startup and server cert
for new connection