Update CLIENT_CERT mechanism to use Scope.SSL_SESSION instead of SSLSession

This would mean even if the actual SSLSession is unavailable the integration still has the opportunity to provide a scope that represents the session.