EUCA-8652: sign entire response when downloading server cert