[Pki-devel] use of CertificateFactory in CAService - dead code?