document client cert