$ 0 0 Try grabbing a Fiddler trace of the non-SPNEGO client with the two different certs. What is different about the requests?