Would it make sense to add another overload where the user could pass in a `X509Certificate2` instance directly?