We use a client certificate for our iPhones and doesn't work. Does anybody have best practices?