Add support for `cc_href` for client certificates