the hostname of the site requiring a client certificate
whether there have been previous failed attempts at prompting the password
the token (or slot) name of the cryptographic device