Separate between trust root for server- and client certificates