[GEODE-10641] Fix CertificateBuilder

[JinwooHwang]

Fix CertificateBuilder

For all changes, please confirm:

• Is there a JIRA ticket associated with this PR? Is it referenced in the commit message?
• Has your PR been rebased against the latest commit within the target branch (typically develop)?
• Is your initial contribution a single, squashed commit?
• Does gradlew build run cleanly?
• Have you written or updated unit tests to verify your changes?
• If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?

[sboorlagadda]

could we add a CertificateBuilderJUnitTest that generates a cert with dns+ip SAN, CA flag, and serverAuth EKU, then asserts
getSubjectAlternativeNames, getExtendedKeyUsage, getBasicConstraints != -1, and a verify(issuerPublicKey) round-trip?