Currently arcanist and libphutil handle server side SSL certificates, but unable to access site requiring client side SSL certificate. Curl has an option to specify the user's certificate (see CURLOPT_SSLCERT), we just need to pass it down from the configuration.