Add -X flag for seperate pkcs11 uri for Certificate

Ex. ldid -K'pkcs11:object=MyKey;type=private' -X'pkcs11:object=MyKey;type=cert'

ldid.cpp

@@ -44,6 +44,11 @@
 #include <sys/stat.h>
 #include <sys/types.h>
 
+# if SMARTCARD
+#  define OPENSSL_SUPPRESS_DEPRECATED
+/* We need to use engines, which are deprecated */
+# endif
+
 #include <openssl/opensslv.h>
 # if OPENSSL_VERSION_MAJOR >= 3
 #  include <openssl/provider.h>
@@ -3506,6 +3511,7 @@ int main(int argc, char *argv[]) {
     Map entitlements;
     Map requirements;
     std::string key;
+    std::string certuri;
     ldid::Signer *signer = new NoSigner();
     ldid::Slots slots;
 
@@ -3714,6 +3720,11 @@ int main(int argc, char *argv[]) {
                     key = argv[argi] + 2;
             break;
 
+            case 'X':
+                if (argv[argi][2] != '\0')
+                    certuri = argv[argi] + 2;
+            break;
+
             case 'T': break;
 
             case 'u': {
@@ -3741,7 +3752,7 @@ int main(int argc, char *argv[]) {
     if (!key.empty()) {
 #if SMARTCARD
         if (key.compare(0, 7, "pkcs11:") == 0) {
-            signer = new P11Signer(key);
+            signer = new P11Signer(key, certuri.empty() ? key : certuri);
         } else
 #endif
         {