title: How do you use Thinktecture IdentityServer 3 with Certificate setup
body: <p>I want to use Thinktecture IdentityServer 3 to provide STS to ASP.NET site but I don't know how to setup the certificates.</p>
  
  <p>How do I use SelfHost (InMem with WS-Fed) Thinktecture Identity Server 3 as STS for a local IIS site?</p>
  
  <p>The problem I have is as follows:</p>
  
  <p>I've used this client in VS Development Server:
   <a href="https://github.com/IdentityServer/IdentityServer3.Samples/tree/master/source/Clients/MvcOwinWsFederation" rel="nofollow">https://github.com/IdentityServer/IdentityServer3.Samples/tree/master/source/Clients/MvcOwinWsFederation</a></p>
  
  <p>with the SelfHost (InMem with WS-Fed):
  IdentityServer3.Samples/tree/master/source/SelfHost%20(InMem%20with%20WS-Fed)</p>
  
  <p>It all works, connects, authenticates and displays claims.</p>
  
  <p>But when I publish the client to local IIS site called WSFedClient and that tries to authenticate against the same self-host STS,
  but I get this error: </p>
  
  <blockquote>
    <p>"The remote certificate is invalid according to the validation
    procedure."</p>
  </blockquote>
  
  <p>I've followed this:
  <a href="https://github.com/IdentityServer/IdentityServer3/issues/553" rel="nofollow">https://github.com/IdentityServer/IdentityServer3/issues/553</a></p>
  
  <p>...but I'm still confused about what it is I need to do.</p>