<install scripts> - Fix self-signed certificate generation

Certificates were being generated with -extensions v3_req which cause
the self-signed certificates to be invalid (more so than normal
self-signed certificates) since they are not authorized for signing
certificates.
<oo-diagnostics> - Verify Broker certificate

Tests that certificate validates (against itself) and that the
ServerName matches the certificate.