Create sign-server-req

This explicitly adds the nsCertType = server to the certificate.