authenticator which receives the server certificate fingerprint

it checks the signatures on the chain, certificates need to be valid, and instead
of using a trust anchor the server fingerprint is checked against the provided value