Key usage and extended key usage are fields in X.509 certificates set when the certificate is created.
It seems yours denies a usage which is required in this use case.
Return to the software that created your certificates, and check its settings. The most likely one to be missing would be for the extended key usage to mark it as a server only certificate, not usable for client authentication.