openssl  x509 -fingerprint -sha256 -in server.crt -noout