Extract public key from cert if no object on card