Results 2 issues of S K

Addresses #6921

under review :monocle_face:

We currently have support for base64 client certificate, but this only fetches the first certificate that the client sends. See #3767 for prior discussion on how support for this was...