Client Certificates at the Backend?

This was a very helpful thread. My case is to do the same thing in java. I'm going to use the sun.misc.BASE64decoder to get the certificate. I do need to case the result to a X509Certificate[] object. The above just doesn't work. I get is as a byte[] but not a X509 object. I was thinking maybe X509::whole would work. How do I use that command. (ok, it's a newbie question).

 

 

HTTP::header replace SSLClientCert [b64encode [X509::whole $the_cert]]

 

Is this how it works? This creates an object in PEM format. My certs usually will have three levels. Would the PEM format load into the X509 java object. Maybe a sample java program would help me understand.