UIs to use client certificates are terrible, and key and certificate storage almost always involves a password anyway.

My day job occasionally involves a WebDAV server protected with a normal login plus a client certificate. Sometimes I need to explain the process to less technically literate people who use different client software than I do, and the certificate part is a total pain.