I was just showing both for completeness. If I were coding it for real, it would be an error to specify both the id and the label. Without actually reading the certs, they can be uniquely identified by either module_name,slotid,id or by module_name,slotid,label.