Same certificate for server authentication and authorizatoin in other system
What I did in the end was to use DN/UID (OID: 0.9.2342.19200300.100.1.1) to store this value, exactly as it is suggested in an answer to this question.