add client certificate support

fixes upstream issue #23