Description of problem:
NSS does not seem to take into account many parts of PKCS#11 URI, e.g. 'id'.

Version-Release number of selected component (if applicable):
nss-3.41.0-5.el8.x86_64
p11-kit-0.23.14-4.el8.x86_64

How reproducible:
always

Steps to Reproduce:
1. add two certificates to softhsm token
2. try to list only one of them by specifying id in URI: certutil -d /etc/pki/nssdb/ -L -n 'pkcs11:id=%e9%42%e3%48%6f%0c%5e%c3%46%2b%e4%1a%51%d3%c1%0c%15%57%5d%04;type=cert'

Actual results:
both certificates returned

Expected results:
only one certificate returned

Additional info:
Another part of URI NSS does not care about is 'type', it happily returns certificates even though 'type=private' is specified.