Certificate based authentication along with 2FA

I would like implement certificate based authentication using MSCA as authenticator and along with 2FA as otp/push.

Same I have achieve using authorization plugin where as first factor as user name and password and for second factor it going to my server for otp varification.

In this case I would like to go to MACS for primary as certificate authentication and after that I would like to go to my server for second factor.