IaikExtendedSlot.java: handle PKCS#11 object without id, ca-certprofile-example: make the validity configurable, ca-client-api and ca-client-impl: remove duplicated code