Modify CertificateReference to take in an X509Certificate2