When using StartTLS verify the CA and/or fingerprint

Perform CA/fingerprint validation for StartTLS as well.