ScottGu just pushed out an article on Self-Signed certificates on IIS 7.0 which reminded me to blog about certificates and CardSpace. One of the problems in getting started with CardSpace is it's reliance on certificates. The relaying party needs an SSL certificate and the STS needs a certificate. MS distribute their test certificates for Fabrikam and Adatum in the CardSpace samples, but what if you don't want to pretend to be Fabrikam.com? You end up making your own. However there's a problem. The STS sample as delivered checks the CRL when it decrypts the RST. Generally self signed certificates, such as...