code: public CertificateLoginAuthenticator createCertificateLoginAuthenticator() {
          SecurityService securityService = securityServiceRef.getService();
          return new CertificateLoginAuthenticator(securityService.getAuthenticationService(), webAppSecurityConfig.createSSOCookieHelper());
      }
docs: Create an instance of the CertificateLoginAuthenticator.
  <p>
  Protected so it can be overridden in unit tests.