I have a client site that when a button is clicked it calls a wcf web service. The client site is http, while the url for the web service is https and requires a certificate
If it is a private cert it must be added to both the client and the server as no client can validate its root key.