extended name with hash of policy cert