We have an internal Certificate CA, configured to deploy certificates to our workstations so that only PC's with Certs can access our network. We then recently configured our ASA 5516 running Software Version 9.14(1)19 to do a Certificate check first...