The newer G4 certificates use different OU values. These hasn't been updated in the validators code. I need to overhaul the checks.