Handle certificates with no CN
display nasal import error for easier debugging
Clarify good VS bad results in console output
Display the cert issuer CN if possible