store & verify server cert fingerprint