certificate manager: migration from application component to application service [^batrak]