PKCS12 certificates may have .pfx extension