When doing password validation and SSL/TLS is enabled, use a certificate