I'm trying to set up client certificate authentication. I was able to generate a CA-, server- and client-certificate. As long as I use Fiddler everything works as expected. However, as soon as I start using a browser it doesn't work anymore (HTTP Error 403.7 - Forbidden). 

Of course I imported the client certificate in the Personal store and I made sure Client Certificate Negotiation is enabled. 

I also tried `openssl s_client -connect 127.0.0.1:443 -state -debug` but I couldn't really make sense of the result... The only thing what's weird is that my CA doesn't show up in the `Acceptable client certificate CA names` section.

Anything else I could try?

**Update:**
I think it doesn't matter but my server certificate is set up for 127.0.0.1. Therefore I'm using `https://127.0.0.1/...` in my browsers.

**Update2:**
Using Wireshark I noticed that my servers' response depends on the client:

Fiddler (OK):

```
Client Hello 
Server Hello, Certificate, Server Hello Done

```

Browser (Not OK):

```
Client Hello
Server Hello, Change Cipher Spec, Encrypted Handshake Message

```

**Update3:**
After enabling `clientcertnegotiation` the server response is different but still doesn't work:

```
Server Hello, Certificate
Certificate Request
Certificate, Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message

```

My self-signed CA doesn't seem to be in the Distinguished Names list...

**Update4:**
SSL Settings: Checked `Require SSL` and Client certificates set as `Required`. Client cert shows up in Personal and the intended purpose is Client Authentication.