as with the cache, a search by cert DER should crack the DER into issuer and serial, then index the hash directly, as opposed to iteration
as with the cache, a search by cert DER should crack the DER into issuer and serial, then index the hash directly, as opposed to iteration

thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss