use public key from certificate in client