VPN certificate endpoint