#15, #16, #17: Use correct matching for PKCS provider.