pki: Add --dn command to extract the subject DN of a certificate