fix certificate and key extensions fix default certificates and key search path
==> Check TODO in Security ATS