i have seen people bind certificate when they host their web site or service in IIS but when client call their service then client may not use any certificate but some time client also use certificate. so i like to know some one tell me scenario when client need to use certificate ?
how client get the certificate ? client purchase it or get free of cost from web service company whose service client consume?
why client use certificate......for any better security?
if web service use certificate purchased from company1 and client purchased from company2 then communication will be possible ?
guide me about client side certificate for consuming web service or web api.