You actually got further than me because I have never been able to get my linux server to accept the certificate unless the ReqCert is set to never.
I would think you are in good shape - some higher level security experts here might confirm as well??