add support for use of fixed DH client certificates