Use new gofmt.
Use CA certificate's serial as initial serial number.