add support for saml verification via cert serial number