Function fingerprint_of_der 

pub fn fingerprint_of_der(der: &[u8]) -> String

SHA-256 of a certificate’s DER encoding, lower-case hex.

This is the string users compare and pin. It is computed the same way in every code path on purpose — a fingerprint that is formatted differently in two places is a pin that silently never matches.