Fix cert fingerprint path to deny noncerts