pub fn server_end_point(der: &[u8]) -> Result<Vec<u8>, String>
RFC5929 tls-server-end-point: hash the serving certificate using its signature hash, upgrading legacy MD5/SHA1 to SHA256.