store additional properties of CertificatePairs in userinfo.properties; refresh CertificatePair also retrieves certificate when present.