Certificate has key usage 00a0, expects 00a0