add server.crt/key for certificate alias