migrate also serviceId in CA Certificates