testing: more mods to fix cn

and now i've cat'd @ecotrust.org to the end of the userprincipalname