run: generate separate server certs