OK, so Express can for sure encrypt by passphrase, so I'm expecting it will work by certificate as well.

Yup, it does work by certificates as well...

Once more, thank you!

Jason A.