milestone: server uses provided certificates