How to CAC authentication using iRule?

I would like to setup SSL off-load and DoD CAC authentication with OCSP check. I don't have APM. I already setup VIP, pool, node member, load DoD-root-ca bundle certificates, and etc. I like to know any template (content) of CAC authentication and how things combine OCSP check and authentication together.

Thanks

-James