add TLS CertFP support