The user certificate being used for authentication does not have a proper extended key usage (EKU) set.