Hi,
please find attached two small patches related to the conversion of the public key in a certificate to a public ssh-key.
The first fixes an issue which should only happen in master. The second might be useful for already released versions as well, but I would wait until we get a report that the old scheme fails with some certificates.
bye, Sumit