Is it possible to configure Nginx as a reverse proxy where it will proxy the connecting client's authentication certificate?

I have an application service (hosted in tomcat) that requires a client-certificate for authentication but it can only be accessed via a proxy from the outside world. Is it possible to proxy the certificate from the client to the app-server? I believe this is doable in Apache, but we would prefer to use Nginx for this task (if possible). What options do I need to configure for this? Level 2 balancing is not possible in this environment.