/p><p>
   The second approach combines any authentication method for <code class="literal">hostssl</code>
   entries with the verification of client certificates by setting the
   <code class="literal">clientcert</code> authentication option to <code class="literal">verify-ca</code>
   or <code class="literal">verify-full</code>. The former option only enforces that
   the certificate is valid, while the latter also ensures that the
   <code class="literal">cn</code> (Common Name) in the certificate matches