I think the main narrative here is:

- @50e88dcc `forceIssuer` was added to `getAssertion`
- @8c599a80 some production hotfixes were merged from dev to b2g
- @95d38165 update to handle expired primary certs in