Currently, certificate validation in GEP requires a match on the certificate thumbprint. Can this be changed to match the public key. This would allow the expiration of a certificate to be updated without requiring every GEP party to re-exchange certificates.