security (internal): In IdentityManager._makeSignatureByCertificate, temporarily ignore the public key.