I understand that X.509 certificates are used for authentication.
How can I use the information provided in an X.509 certificate for authorization? For example, are there any fields in the certificate that can be checked by the server to determine whether that user can access a resource once authenticated?
Thanks