use email from CA creation also as the default for server cert