fix #1470: ad: server and client certificate support