Certs chains and authenticate depth...

We had a similar problem where we received "unsupported certificate purpose" with the certificate authority listed as the failing certificate. The problem was in the code - it did not understand part of the encoding in the CA certificate. F5 created a hot fix for us. If you are not receivng failures just submitting the client cert then your problem is also likely one of the CA certs.