iRule to check the client IP along with the client certificate CN

Hi, I'm trying to narrow the accepted traffic to be from a source IP address with a specific common name ( from the authorized certificate), but im getting an error: can't read "subject": no such...