Chrome blocked client certificate generation by default from version 49, I think you have to enable it specifically now and in general the process is messy (difficult to tell if your private key info is lost or where it ended up).

Firefox still works. No idea if people use it for auth, but it is popular when requesting a certificate.