generation of keyid requires pkcs1 plugin