Fix bug 571: associate certificates with keys, not dirservers, so that we can have...