In short, yes.
The switch itself has no idea what credentials are being presented to it. So if you configure Active Directory group policy to present machine credentials (don't even have to use certificates, but you can), it will. And if you configure the RADIUS server to allow that group, it will.
The switch itself just passes on whatever credentials it is given and responds to the RADIUS server message saying weather to allow or deny access.