title: https client certificate logout/relogin
body: <p>I have a web site using ssl certificate authentication.
  How to force the web browser from the server to ask again the certificate to be used?
  It would be useable for logout, but the use case here is switching user identity.</p>
  
  <p>I remember something about directing the user to a page which have ssl settings incompatible with the current authentication certificate, but could not find the right settings.</p>
  
  <p>My setup uses apache mod-ssl, but an IIS solution would also be welcome.</p>
  
  <p>Update:
  I am specifically asking the server side: how to set up an URL on the same hostname that requires client certificates but rejects all certificates.</p>
  
  <p>For Firefox, <code>javascript:window.crypto.logout();</code> does work with minor user inconvenience (which I believe could be scripted around).</p>