DEV-42996 GIAB: configuring via CLI tools corrupts viewer certs

Added authority key identifier/subject key identifier checking.
Whenever a new cert was created, a new private key was also
created.  Typically you get a new key identifier with
that private key which is written to the child cert.  The
child cert can then find the appropriate parent cert
for validation via subject key identifier.