Take userdn from cert and not from proxy