added the missing accessmax option to the ns_cert configuration block