I think there are 2 things. One is that we always using the same certs - there are couple types of certs that you can use there and I have used new one I have generated and it did not passed validation.
Second is that requireing base64 is very bad user experience. File upload will be much easier to deal with.