The current implementation relies on AKI and SKI which are optional fields and can result in cert construction to fail in some scenarios.