> ## Documentation Index
> Fetch the complete documentation index at: https://docs.activeviam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# atoti.ClientCertificateConfig

### *final class* atoti.ClientCertificateConfig

The JKS truststore config to enable client certificate authentication (also called mutual TLS or mTLS) on the application.

<Callout icon="link">
  **See also**:
  [`ClientCertificate`](./atoti.authentication.client_certificate#atoti.ClientCertificate).
</Callout>

#### trust\_store *: [Path](https://docs.python.org/3/library/pathlib.html#pathlib.Path)*

Path to the truststore file generated with the certificate used to sign client certificates.

#### trust\_store\_password *: [str](https://docs.python.org/3/library/stdtypes.html#str) | [None](https://docs.python.org/3/library/constants.html#None)*

Password protecting the truststore.

#### username\_regex *: [str](https://docs.python.org/3/library/stdtypes.html#str)* *= 'CN=(.\*?)(?:,|\$)'*

Regex to extract the username from the certificate.