iRule example to extract specific X509 information: SOL5171

If it were me, I would create a class of URIs (assuming you have more than 10-15 or so, otherwise an if/else chain or switch is more efficient), and check to see if the incoming URI is in that class. On success, I'd force the cert mode to require.

It would look something like this (assuming you created a class of desired URIs as "certURIs"):

when HTTP_REQUEST {
  if { [matchclass [HTTP::uri] starts_with $::certURIs] } {
    SSL::authenticate always
    SSL::authenticate depth 9
    SSL::cert mode require
    SSL::renegotiate
  }
}

Which is distilled from this earlier post where a community member got a slightly more involved version of the above working: Click here

HTH,

Colin