thank you. both seem legit.
#certutil -V -u V -n Server-Cert -d /etc/httpd/alias -e -f /etc/httpd/alias/pwdfile.txt
certutil: certificate is valid
#certutil -L -d /etc/httpd/alias -n Server-Cert
...
Name: Extended Key Usage
TLS Web Server Authentication Certificate
TLS Web Client Authentication Certificate
...
naor