simplify reviewcert by breaking out pkc key extraction code into it's own function