lookup stored certs when key dropped