CACreateCert: let --dni serial=# relocate the random serial number