Create sign-server-req

This explicitly adds nsCertType to the certificate