x509 certificate builder from buffer(tls)