System.Net.Security.SslStream supports TLS client certificates by requesting it as follows:

sslStream.AuthenticateAsServer(
    serverCertificate,
    clientCertificateRequired: true,
    checkCertificateRevocation: true);

This works well, however, the client (the browser) will send a TLS client certificate of its own choosing. The TLS protocol supports the server submitting a list of "acceptable client certificate CA names". Without providing one, the client is free to choose one. The list of CAs is important as it is the only way to reliably work with cases where the clint has multiple client certificates installed. I do not see how I can submit a list using this class.

Is this a limitation or am I missing something? Are there workarounds?