add test for sha-1 fingerprint compare, fix bug in root checking