please find attached two small patches related to the conversion of the
public key in a certificate to a public ssh-key.
The first fixes an issue which should only happen in master. The second
might be useful for already released versions as well, but I would wait
until we get a report that the old scheme fails with some certificates.