def is_client_auth_required(domain):
    """
    Domain requires client authentication if *any* HTTPS endpoint requires it for full TLS connection.
    """
    https, httpswww = domain.https, domain.httpswww
    return (https.https_client_auth_required or httpswww.
        https_client_auth_required)
