Client authentication and irule

I have client authentication configured along with irule - when CLIENTSSL_HANDSHAKE...

Question is about flow. First CLient certificate will be authenticated as per Client SSL profile where certificate will be verified for validity, chain ,

signature ....and after that irule will kick in and do its own verification {when CLIENTSSL_HANDSHAKE ..} or it will be different logic. How does client authentication with irule works ( irule look at SSL HANDSHAKE).