Generate SHA1 thumbprint of incoming SSL cert

Hoolio, the devs just asked about your concern about "preventing a malicious user from injecting their own headers". Could someone please post the complete iRule that will 1) insert the cert subject 2) insert the thumbprint and 3) remove pre-existing headers? I'm starting to understand iRules now but not sure the order in which to plug things in. Thanks!