Technical and conceptual assessment of a certificate-based VPN infrastructure