Make cert CN unique to avoid certificate serial number clashes