Only consider certificates that have encryption capabilities

Use https://git.scc.kit.edu/heiko.reese/CertificateToolbox/-/blob/master/filter.go#L135.