Data encryption at the application level, combining AES symmetric key with RSA encryption of the key via X.509 certificate