```release-note:improvement
auth/cert: test non-CA cert equality on login matching instead of individual fields.
```