Tries to extract the nonce from a TBS CSR's subject name, given it is encoded into an RDN containing a KnownOIDs.serialNumber