Make 2-way TLS optional and fix cert errors

No match.