The best way to start testing PEAP when coming from LEAP is to uncheck server certificate validation. Depending on the client you're using there's an option for this. WinXP has it under the advanced area of authentication. Uncheck that, then test your PEAP. IF that works, then you know you can focus on the certiciate mutual authentication portion of your deployment.