OCSP validation and thumbprint passing in header

I currenlty have a website setup that uses two mechanisms for logon. The first mechanism is just a user name and password that is validated against a database, the second mechansism is that the clien...