Bugfix release

Updates to the verification script to fix a bug that appears when the service principal name doesn't appear in the issued certificate. Also fixed bug to deal with subject CN=$hostname,OU=pki-ipa,O=IPA (rather than assuming subject is always CN=$hostname,O=).