fix:cert-pinning only pin CA, not actual cert