...
This plugin is considered Experimental.
Configuration
This is a non-core plugin, see Installing and Enabling Registry Plugins for more information.
Certificate Attributes
CertificateAuthenticator does not currently support the storage of the entire certificate, but rather limited attributes such as Subject DN and Issuer DN. Currently, the expectation is that an Authentication system would use these identifier to validate the certificate, though this could change in a future release..
...