```release-note:security
auth/cert: Compare full bytes of trusted leaf certificates with incoming client certificates to prevent trusting certs with the same serial number but not the same public/private key. HCSEC-2025-18.
```
