Certificate support added in #332 does not use an X509 attacker to parse certificates. We should change that.