Support both unencrypted PKCS#12 and PKCS#12 encrypted with an empty password in X509Certificate2 constructor