Hi Ralph,
First of all thanks for detailing out how you achieved it, this will definitely help others who are trying to achieve the same 2-factor authentication.
While replying I assumed that you wanted to use the certificate also as credential. While you wanted to pass on WIN-AD credentials along with a valid certificate. Anyways, good to hear that your problem is resolved.
Regards,
Ashutosh