title: Browser doesn't apply client certificate: 403.7
body: <p>I'm trying to set up client certificate authentication. I was able to generate a CA-, server- and client-certificate. As long as I use Fiddler everything works as expected. However, as soon as I start using a browser it doesn't work anymore (HTTP Error 403.7 - Forbidden). </p>
  
  <p>Of course I imported the client certificate in the Personal store and I made sure Client Certificate Negotiation is enabled. </p>
  
  <p>I also tried <code>openssl s_client -connect 127.0.0.1:443 -state -debug</code> but I couldn't really make sense of the result... The only thing what's weird is that my CA doesn't show up in the <code>Acceptable client certificate CA names</code> section.</p>
  
  <p>Anything else I could try?</p>
  
  <p><strong>Update:</strong>
  I think it doesn't matter but my server certificate is set up for 127.0.0.1. Therefore I'm using <code>https://127.0.0.1/...</code> in my browsers.</p>
  
  <p><strong>Update2:</strong>
  Using Wireshark I noticed that my servers' response depends on the client:</p>
  
  <p>Fiddler (OK):</p>
  
  <pre><code>Client Hello 
  Server Hello, Certificate, Server Hello Done
  </code></pre>
  
  <p>Browser (Not OK):</p>
  
  <pre><code>Client Hello
  Server Hello, Change Cipher Spec, Encrypted Handshake Message
  </code></pre>
  
  <p><strong>Update3:</strong>
  After enabling <code>clientcertnegotiation</code> the server response is different but still doesn't work:</p>
  
  <pre><code>Server Hello, Certificate
  Certificate Request
  Certificate, Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
  </code></pre>
  
  <p>My self-signed CA doesn't seem to be in the Distinguished Names list...</p>
  
  <p><strong>Update4:</strong>
  SSL Settings: Checked <code>Require SSL</code> and Client certificates set as <code>Required</code>. Client cert shows up in Personal and the intended purpose is Client Authentication.</p>