The new WithCertificateKeyPair (and related) APIs are specifically intended to be used in configuring server authentication certificates. We should consider updating the API names to make that clear. This would reduce the potential for user confusion and avoid the need to rename later if we were to add APIs for additional certificate related scenarios in the future, such as client authentication certificates.
WithServerAuthenticationCertificateKeyPair or WithServerAuthCertificateKeyPair are potential options.