SSLVerifyClient      none
SSLCACertificateFile /../kreonet-ca-chain.pem

<Location />
    Require all granted
</Location>

<Location /secure>
    <If     "-R 'AAA.BBB.CCC.DDD/32'">
    </If>
    <ElseIf "-R 'BBB.CCC.DDD.EEE/32'" >
    </ElseIf>
    <Else>
        SSLVerifyClient require
        SSLVerifyDepth 1
    </Else>
</Location>