Backport of Compare public keys on trusted leaf certs, to prevent use of alternate certs with the same/forged serial numbers into release/1.14.x

Backport of Compare public keys on trusted leaf certs, to prevent use of alternate certs with the same/forged serial numbers into release/1.14.x #13771