Always set `CN`. Even if no grains are set (because the domain could not be inferred), set the default dns domain from the pillar.
Always set `CN`. Even if no grains are set (because the domain could
not be inferred), set the default dns domain from the pillar.

This ensures we also have a value for the `Common Name` value on the
certificate that will be generated for the Certificate Authority.

ereslibre/salt,ereslibre/salt,ereslibre/salt,kubic-project/salt,kubic-project/salt,kubic-project/salt