Use the certificate fingerprint for the key id

Bumped the version of forge to the latest which will calculate a pretty standard SHA1 fingerprint. Use this fingerprint as the `kid` value. Just think it is a better identifier than exposing the disk filename.