pki: Properly forward digest to attribute certificate builder