I have our ASA (5520) setup for SSL Certificate authentication and it is the certificate authority using self signed certificates (http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808efbd2.shtml). It works really well...