offlineimap: switch from fingerprint to certfile