Yes. Debian uses client-side X.509, OpenPGP and OpenSSH certificates for all service authentication (including websites).