EAP-TLS vs X.509 certificate chains