Background: I have setup my macOS Catalina so that I can authenticate my user account using my Yubico (set up as a Smart Card) and its PIN
After setting this up I can see that there are now 2 certificates on my Yubico - an Authentication certificate (Slot 9a) and a Key Management certificate (Slot 9d). There is also now a copy of the Key Management certificate on my user account's 'login' keychain.
Question: How does this form of user authentication work? If someone could outline a workflow I would be hugely grateful!