client cert instructions for non-GUI mode