A pass phrase on a certificate is two step. Password + TOTP is two factor.