New option to 'x509' -next_serial. This outputs the certificate