supporting clear text and obfuscated client cert