http://www.freebsddiary.org/openssl-client-authentication.php
http://www.mozilla.org/projects/security/pki/nss/ref/ssl/
http://www.verisign.com/repository/clientauth/ent_ig.htm