GetCertificateCN(): if the CN is missing, fall back to the DNS SAN

GetCertificateCN(): if the CN is missing, fall back to the DNS SAN #664