Although my question was more than a year ago and did not ever get an answer, I think I may have found a way to do it. When a web application is running and a second CAC is inserted into an additional reader on the PC, ActivClient reads the card and places the certificate into the store. So I access the store and find the cert by the persons' name:
enter code here