Always set commonName in X509 certificates