Instead of always returning an artificial name try to preserve the
keyring filename if the split only yields a single certificate.