a few comments:
* use
dev tap0
instead of 'tap'
* what is inside the 'ccd' directory
* is each client assigned its own certificate - this is a
requirement
* what does the server log file show when the second client connects
also, ask yourself if you REALLY need bridging - 99% of the people don't