certs service: Use the issuing email address as a subjectAltName

This will let users of the cert identify themselves with fixed identifiers