I recently had a customer embark upon the process of securing Web services by using SSL and client-side certificates for authentication. On the surface, this seems a very straightforward process, but after spending four days of questioning why four simple
