Add code to look for a urn in the certificate, and store that into the
DB to overwrite old version without urn. More generally, we need to
think about how to deal with changing user certificates.