Why doesn't client.certificate.requested evaluate correctly?