Add KeyUsage to signed cert
Use tun instead of tap