initial server-cert support