update with more precise client support for EC certs