Programmatically mapping certificate to user account in IIS

Hello,

I would like to programmatically map a certificate to a Windows user
account. Same as done using the IIS admin UI in the "Directory Secirty" tab
and the pressing the Edit button in "Secure communicartion" and then
pressing the Edit button in client certificate mapping. Only I want to do
this programmatically, not using the UI.

When doing this using the UI and examining the metabase, I see some new
directory entries (using ADSI). However I see only the thumbprint of the
certificate and there is no information about the user account. Where is the
user account infomation stored?

Thanks a lot in advance,
Boaz.