allow pfx for ssl