Replacing a user certificate with a CA-signed certificate (server ID)