fixed keyids in sql/net2net-cert scenario