Change urn() function to return urn from the certificate, rather
generating one (which is always wrong). If the certificate has
no urn, return the uuid instead.