Can use either certificate thumbnail or raw data for subscription initialization.  And remove some debug code