Code looks good to me, though you could get away with configuring just hostkey and derive the fingerprint for it yourself, but this works for me.
:rabbit:
Though note that for SSH, this is often called "public key" rather than "certificate", as people associate the name "certificate" with an X509 certificate.
正しい
Thanks :hamster: