client-ssl broken

I may be missing something, but the only certificate/key values that are used/applied in the client profile are the ones that are explicitly added to the Certificate Key Chain field. You select a cert and key (and optionally a CA chain) and click the Add button. The certificate/key in the drop down select itself is not part of the resulting configuration. This is indeed a different experience than previous versions.