We used client certs in my last project, a private cloud document storage API. Big mistake! I probably spent a quarter of my time helping other teams organise their certs.