some small improvements when searching for issuer certificates