Fix cert version

hope this wont conflict with PR for #14011 - this will fix the certificate ssl version to same as the ca (v 3)
Should this be 2 or 3?