I've followed the following steps:

1. Get the server to allow cross domain calls (with all the headers and stuff) This works


2. Test the server with some cross domain calls This works


3. Get the server to force a certificate This works


4. Go to a file on the server with a browser, choose the right certificate and see the file Still works
   
   Now we get to the nice part


5. Combine the cross domain calls with the certificate <-- this does not work

Problem

I am getting the certificate request from the browser, but when I select the same certificate as I do when using the browser, the call is made but I get a 403 Forbidden.

Code

$.ajax({

     type: POST,

     xhrFields: {withCredentials: true},

     dataType: xml,

     contentType: text/xml; charset=utf-8,

     url: https://www.myOtherServer.com/testfile.asp,

});

Any ideas?

Edit

The Access-Control-Allow-Credentials: true and the Access-Control-Allow-Origin are properly configured.

Additional information

I'm starting to think that it has something to do with the content type. When I change it to text/html I get a 415 error, but I do really need to send xml because it is a SOAP server.

Response headers

Access-Control-Allow-Cred...    true

Access-Control-Allow-Head...    Content-Type, Origin, Man, Messagetype, Soapaction, X-Test-Header

Access-Control-Allow-Meth...    GET,POST,HEAD,DELETE,PUT,OPTIONS

Access-Control-Allow-Orig...    https://www.mywebsite.com

Access-Control-Max-Age  1800

Cache-Control   private

Content-Length  5561

Content-Type    text/html; charset=utf-8

Date    Wed, 19 Dec 2012 15:06:46 GMT

Server  Microsoft-IIS/7.5

X-Powered-By    ASP.NET

Request headers

Accept  text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding gzip, deflate

Accept-Language nl,en-us;q=0.7,en;q=0.3

Access-Control-Request-He...    content-type

Access-Control-Request-Me...    POST

Cache-Control   no-cache

Connection  keep-alive

Host    myhoast.com

Origin  https://www.mywebsite.com

Pragma  no-cache

User-Agent  Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0