support random_serial_number in the CertificateBuilder (#3132)

* support random_serial_number in the CertificateBuilder

* turns out pytest's monkeypatch has an undo

* random_serial_number now a function

* just certs
5 files changed