JSF conversion regression:
The Key alias for the "certSighKey" is not the value of the DefaultKey after choosing the option "Default Key" for the certSignKey while creating a CA. It is a bug in the auto-select function.
The proposed solution is to remove the option "Default Key" for certSignKey.
Also, there is a problem with the KeyEncryptKey, where the available option is only "Default Key".