- Use X509v3CertificateBuilder instead of deprecated
X509V3CertificateGenerator
- Add check on unit test to verify certificate with public key