ASVS Requirement 12.1.3

Description

Verify that the application validates that mTLS client certificates are trusted before using the certificate identity for authentication or authorization.