Function verify_tls_key 

pub fn verify_tls_key(
    hsm: &HsmContext,
    label: &str,
    cert_der: &[u8],
) -> HsmResult<()>

Validate key possession and signature-mechanism support before serving TLS.