title: Using certutil to check certificate responses
body: <p>I am having a lot of trouble setting up an X509 certificate scheme in C#.NET.  SSL is enabled on the server and the connection is being made over SSL.  Certificates are being added to the request's store via <code>request.ClientCertificates.Add()</code>.  However, no client certificate is being attached to the handshake request (which I am both confirming by both checking the server's code through <code>HttpRequest.ClientCertificate</code> and by analyzing the handshake in Fiddler).</p>
  
  <p>As nearly as I can tell, the problem here is that the server is not requesting a client certificate.  The certificates are definitely in the outgoing request, but I see none on the handshake and none on the server side - they simply disappear into the ether.  I'm aware of the semantics behind choosing a certificate (thanks to <a href="http://msdn.microsoft.com/en-us/library/ms229719.aspx" rel="nofollow noreferrer">this page</a>), but it hasn't resolved my problem.  The CAs should be the same; I am using the same self-signed, private key secured certificate for each end of the test.</p>
  
  <p>Apparantly I can use certutil.exe to check which certificates will be chosen when used with a given server certificate.  This would be a huge help if I could figure out how to use it like this.  Certutil is a big program that is poorly documented.  Any help would be appreciated.</p>