describe in help how cert’s common name is determined

[Zocker1999NET]

While the current implemented algorithm might be the obvious solution to choose, I think adding these precise additions can aid users requiring the common name of server & client certificates to be set correctly.