Extract certificate thumbprint from token claims
Verify that the current certificate matches the token binding