remember to duplicate clientCertificate