Support client-side certificate, implement #1490