* recognize self-certifications * save signature type * save expiry time * drop encoded data blob from db