PlanetLab certs have a URN but no UUID or HRN. If an HRN is not
encoded in the DN, make one out of the URN. If the UUID is not in the
CN, invent a new one so that the user and cert records in the database
can be linked.