I think it's OK that your cert didn't have a password... shouldn't be a problem. Good to hear it appears under User.

I believe you checked this before, but your personal cert (under User) does have the Trust set for WLAN, right? Because if not, then it definitely won't be selectable in the connection config.

Since I don't have any experience with your type of setup (we use PEAP+MSCHAPv2), I think I'm out of ideas. But report back on how it goes on Monday, and maybe by then someone with some more experience with cert authentication will turn up in this thread.