Referring to this post, On Ubuntu, why is OpenConnect able to establish connections (based on certificates) that PulseClient cannot?
Cert-based authentication on Linux is available. See https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40514