Manually obtain the thumbprint (signature) of the server certificate for an OIDC identity provider to validate that the certificate automatically retrieved by IAM is the correct one.