Implement client certificate + tests