Can attribute certificates (also known as authorization certificates) be used with HTTPS? For instance, can a HTTPS server supply an attribute certificate in addition to its ordinary SSL certificate? If yes, what will browsers do when they see it? Do they ignore it? Do they validate it (check that's signed by a trusted CA)?
For instance, I found RFC 5878, which describes a TLS extension for supporting attribute certificates, but I can't tell whether it is supported by browsers.