when you use peadm to setup a PE infra, it inserts data into the certificates. you can use that to differentiate between primary and compilers