Use the fingerprints for comparison instead of the whole cert.

Reading debug output when running with bash -x is pretty difficult when
the whole certificate string is being written out everywhere.