How to configure qemu with VNC encryption/SASL authentication and Windows client

[Adam Kessel]

I've spent a fair amount of time reviewing the docs at 
https://qemu-project.gitlab.io/qemu/system/vnc-security.html but have 
not found any step-by-step guide for how to connect to a QEMU instance 
from any of the common Windows VNC clients (UltraVNC, RealVNC, 
Tight/TigerVNC, etc.) I've followed the instructions for generating on  
ca-cert.pem, server-cert.pem and server-key.pem on the server hosting 
qemu and have launched the VM accordingly, but can't figure out any way 
to connect into that server from a Windows VNC client that does not fail 
at the initial connection stage. Are there any best practices/tips for 
configuring the client-side of the VNC connection?