Fixes to dual certs (#4663)

- update various outdated comments
- fingerprint alt_key_file in tls info metadata
- make test assertions more specific to new log messages

Signed-off-by: Petr Khartskhaev <pkhartsk@redhat.com>