Don't use an RSA-PSS cert for RSA key exchange