use issuer attributes in IssuerSerial certificate reference