Function verify_cert_binding 

pub fn verify_cert_binding(
    cert_der: &[u8],
    expected_thumbprint: &str,
) -> Result<()>

Verify that a presented certificate matches the x5t#S256 thumbprint bound to an access token (RFC 8705 §3).