use sha1(dn) to construct filename (if empty sha1(mt_rand))