We're using Fabric secure cluster and need client certificate for CI/CD tools.

I've created both Cluster primary certificate and client certificate with this script <https://gist.github.com/kagarlickij/d63a4061a1066d3a85abcc658f0856f5> 

so both have been uploaded to the same Kay vault and both have been installed to local keystore on my machine.

I've added client certificate to my Fabric security settings (Authentication type = Admin client, Authorization method = Certificate thumbprint).

The problem is that I can connect (I'm using Connect-ServiceFabricCluster in PowerShell) to Fabric cluster with Cluster primary certificate but can't with Client certificate.
I'm getting this error: Connect-ServiceFabricCluster : FABRIC\_E\_SERVER\_AUTHENTICATION\_FAILED: 0x800b0109

Please advice what can be done?