crypt32: Accept any matching CN when checking a certificate's name.