CN should be unique. Will otherwise result in a failure with recent easy-rsa versions