security: In IdentityManager.makeSignatureByCertificate, handle KeyType.RSA explicitly.