Log certificate details when mTLS is enabled

Hi.

When mTLS (Mutual TLS) is enabled I can't seem to find a way to make the access log include details of the certificate used to authenticate. This makes it impossible to tell who opened a site requiring client certificate authentication.

Is this information available as an environmental header, have I missed something in the documentation, or would it require more work in order to be accomplished?