Switched back to the node.js implementation of the certificate logic
(although the python implementation runs fine through jwcrypto's
check-assertion