use correct filtering for voms roles; cleanup display of certificate DN