Merge "Should favor most specific CN when working with distinguished names"