find right index for vault cert