pub fn spki_pin_material(host: &str, spki_sha256_hex: &str) -> String
SPKI pin material: spki-pin:<host>:<sha256hex>
spki-pin:<host>:<sha256hex>