APM: selecting clientssl profile based on client certificate

Hi All,   I am using a self signed CA to provide client authentication for APM.   We have recently swapped to a new CA and need to retire the old CA.   The issue I have is that in order to ...