security (internal): In IdentityManager, added _makeSignatureByCertificate and use it in signByCertificate.