add privacy policy confirmation for DutchGrid CA and make CertificatePair work with null serial number from CA