What new standards would be required? All modern browsers that I'm aware of support TLS client certificates, there's even an HTML5 <keygen> element that causes

What new standards would be required? All modern browsers that I'm aware of support TLS client certificates, there's even an HTML5 <keygen> element that causes the browser to generate a CSR and send it to the server for signing.