#1 - unencrypted clientcert (hardcoded to '//home/fmohr/sslcerts/unprotected.p12') is working!