96C73A4D Key purpose restricts client certificate usage.

Explanation
The Extended Keyusage KeyPurposeId is required
on the client certificate but it is not present, or the client certificate
is restricted and not to be used for PKINIT authentication.

User response
Use a certificate with the required key purpose.