I have a customer that is using mTLS with a public CA client cert, this is pinned inside the app and the backed only allows the client cert by verifying the cert.

in XC the customer would like to perform the mTLS validation not on the CA but on the certificate itself.