Updated test certificate generation so newly created CA certs include proper X.509 CA key usage extensions, fixing Python/OpenSSL verification failures while preserving existing server cert generation behavior. - #93