fixing CACert/AIK redundancy