clean up the PKI.get.subject implementation