The problem was in client certificate, that was signed by wrong intermediate certificate.

To find a problem I used flag

-Djava.security.debug=certpath,verbose

so in logs I found that authority key identifier of client certificate is not equal to Subject Key Identifier of intermediate certificate