Tries to extract the challenge from a TBS CSR's subject name, given it is encoded into an RDN containing a KnownOIDs.serialNumber