The request was denied because only Active Directory Lightweight Directory Services (AD LDS) account stores are configured, ...

%%1001 The request was denied because only Active Directory Lightweight Directory Services (AD LDS) account stores are configured, and AD LDS stores do not support Transport Layer Security / Secure Sockets Layer (TLS/SSL) client certificate credentials. 
Target URI: %3