Moving around the PK certificate extraction function