extract public key from ceritificate