fixed get_client_cert_key for new cert style