Use Certificates helper so that we always get the subject DN consistently