comparison for issuer/subject, detect self-signed certificates