mbedtls_ssl_session::peer_cert_digest field

The digest of the peer's end-CRT. This must be kept to detect CRT changes during renegotiation, mitigating the triple handshake attack.