[iancarroll]

Your issue is then with using App Engine, not with them giving you a certificate. There is no way to use App Engine without them getting the plaintext in the end.