pub type CertFingerprint = [u8; 32];
TLS certificate fingerprint (SHA-256 of DER-encoded certificate).