Certificate-based authentication backend