ensure generated cert can be used as a server cert