starts with /CN=, but it does, so I'm gonna stop fighting with the sand. Signed-off-by: Peter Jones <pjones@redhat.com>