[openssl-users] Using set_serial to control serial number size directly

[Salz, Rich]

If the root is going to be trusted, make its serial number be one. ☺
Otherwise use eight bytes of random as the serial number, if you follow CABF guidelines.