Refine pulling auth id from client certificate