Which two statements about certificate-based user authentication are true?

Certificate-based user authentication may not require user input during the authentication exchange.

Certificate attributes can be used to determine the correct sign-in page.

Certificate attributes can be used to assign users to roles.

Certificate-based user authentication requires the use of OCSP.