corlaezand then part of the protocol is about supporting client authentication. An interesting way of using the TLS communication to establish client identity. Clients like Lagrange, automate those certificate creations. You can use them for a session, or to sing in to a domain, etc.