If the browser is forcing a second selection of the certificate / PIN, you may need to ensure the correct certificate is installed into Java keystore via the Java Control panel applet. Also within the Java Control Panel, navigate to "Advanced| Advanced Security Settings" to ensure the option "Use certificate and keys in browser keystore" is unchecked may also correct the issue.
If the above does not assist, it may be required to import the root and intermediate certificates into the Java keystore.