signed data certs may not be set when this is called, so get certs from db.
signed data certs may not be set when this is called, so get certs from db.

thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss