negotiateClientCertificate