Xwiki version: 2.7.33656 Ok, so I have a different webapp running on the same instance of Tomcat as Xwiki, and I'm able to make a getAttribute("javax.servlet.request.X509Certificate") call and am able to get the clients certificates. However, in my custom login for Xwiki when I try the same thing, it just returns null. I've also tried creating a JSP in the Xwiki webapp that does nothing but call request.getAttribute("javax.servlet.request.X509Certificate") and it still returns null. Anyone have any idea why this would be the case? As far as I can tell I have Tomcat configured correctly as I'm able to get the clients certs in a different webapp. Is Xwiki pulling this attribute and storing it elsewhere? Or is this perhaps a struts issue? Any help would be greatly appreciated. Unfortunately I've been given a short deadline on this. Thanks, Lenny