Isn't x.509 meant for the transport layer of the IP/TPC stack, and not really for application authentication? Can you give some more details, how exactly the authentication process would work? What is the motivation to use x.509 specifically?

@Juho, a little googling yielded http://veewee.github.io/blog/authenticating-with-x509-client-certificates/