examples/client: add expected X.509 cert handling

...for self-signed certs.