create client certificates with password protection