So if I send a HTTPS request and the server responds with forbidden, there is a chance that we need to send a client certificate. From what I've read, the SSL handshake sends back a list of CAs that the server accepts. How can I get that list of CAs so I can filter out the client certificates that are valid for that server so I can prompt the user with only valid certs? It doesn't seem to be anywhere in the HTTPResponse or the HTTPSClientSession.
Thanks
-Tom





