Cert Based 2FA No Longer Works for Login

[bgklein]

Noticed starting in 2.2, but don't have an official start version yet. Tried reverting @timotheeguerin recent custom environment work but that does not appear to be the problem (still existed).

Token based (phone, fob, etc) still appears to work properly.

When I try to login with a Windows Hello Virtual Smart Card I get a ERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED error. @matthew-rollitt on the other hand gets past the login screen but is not logged in, instead receiving a message to contact duo support:

[bgklein]

Narrowed this down to it works in 2.1.2, but not in 2.2.0