just a simple missing :ssl_key  => CLIENT_CERT option