Fix to migrate a pre-new-cert-ui certificate to a post-new-cert-ui databse.

This still ignores the certs with a passphrase in them (may/may not add that later on)

Unless, something else breaks, this should be a sufficient fix.

Ticket: #6351