EAP TLS certificates - Questions