ClientCertificate APIs