We need to know:
1. Is this the best way to get client cert data to the web server? (We used to use it from the cgi collection, is there a way to get it into that collection again?)
2. What kind...
Depending on whether or not you have a hotfix for 9.1.1, there were issues with the session command that have been fixed. You should definitely contact support.