nvctrler: use 'nva' instead of 'dnc' in the cert common-name