Certificate can be passed as PEM string