Recently we had to communicate with an external API featuring mutual authentication using client certificates (AKA two way SSL).