ca: Store foreign key in cert record

Store CA foreign key instead of CA key identifier
2 jobs for v0.7
in 1 minute and 52 seconds and was queued for 0 seconds
latest