5 Certificate matching ********************** To match certificates hx509 have a special query language to match certifictes in queries and ACLs.