Certificates implementation in "SSL forward proxy client and server authentication" scenario.

It sounds like you are doing reverse proxy, not forward proxy.

For your client SSL profile, you should only need to specify your certificate and key. Can you modify your client SSL profile to remove all other configurations than the certificate and key, and then retest?

If you are doing any kind of client certificate based authentication, then other options will need to be specified.