correctly include email in subjectAltName section of user certificates/gids