Microsoft is phasing in changes to how certificates are mapped to Windows accounts. These changes will cause authentication failures with certificates issued using client authentication and not using Active Directory to supply subject information.