Implementing client-side certificates