EUCA-8652: sign the entire response when downloading server certificate