publicKey.id should follow convention

Since we point to the actual PEM download, SI tries to download and parse it as JSON