The problem was that the certificate did not contain client authentication. I was create new certificate with server and client authentication and then I was able to replace certificate.
View solution in original post
