Our organization was having the same issue, we were able to get it
working by placing the cert file into a .pkg (repackaged), essentially
using @michaelprice's method. However we were still having issues on our
windows side. Just to share for anyone ...