Update server cert to include subjectAltNames

Go1.1 has stricter client checks that must include an IP match when an
IP is used for the server name.

Add IP.1=127.0.0.1 under the subjectAltNames section of the openssl
config for the custom certificate authority and re-request a server
cert.