We use client certificates for our internal services.

Also you should know that Apple use this for its push notification system.

But I still think the technology is underrated.