CN returns the Subject Common Name of a PEM-encoded X.509 certificate held
in memory. Same check as ReadCN, for callers holding bytes that have not
been written to disk yet.
ReadCN reads a PEM-encoded X.509 certificate at path and returns its Subject
Common Name. Returns an error if the file cannot be read, contains no PEM
block, or cannot be parsed as a certificate.