....the commonName of the second certificate is the OR's nickname, followed by a space and the string "<identity>". What is "<identity>" ? cs