Fix cert version

hope this wont conflict with PR for #14011 - this will fix the certificate ssl version to same as the ca (v 3)
Then I will merge it!