this is needd to be able to lookup the pubkey... In testing this, we verified the identity obj, and it exposed the issue that the ASN1DictCoder doesn't actually make canonical output (dict keys were not sorted), so fix this locally...