If you want x509 support, you'll have to look at a commercial version of SSH. And, at that point, you would need to use a sftp/scp client built to follow their login process if they require an x509 ...

Microsoft has highlighted that TLS 1.3 issues in IIS Express on Windows 11, leaving developers with workarounds.