csp plug: add support for certificate transparency