fix subject in generated certificates