servercert: support embedding server alt names