a client certificate is required to use this service, but no verified certificate chains