Rather than trying to guess which cert we just generated, parse the generated cert data and extract the thumbprint directly.