Add F&Q about creating a valid client auth cert