I previously posted a blog entry detailing how to configure System Center Update Publisher to work with a Verisign provided certificate.  After additional work in this area it was clear this post needed to be expanded.  I have updated it to include far more detail.  Hope it helps.

http://blogs.msdn.com/steverac/archive/2009/03/31/using-third-party-certificate-with-scup.aspx