we use this very extensively for authentication by partners. If our partners want access to our internal technical documents etc. this is the only way to get th

we use this very extensively for authentication by partners. If our partners want access to our internal technical documents etc. this is the only way to get them by identifying yourself via client certs. The bigger issue is how do we go browser neutral when generating the CSR. On IE we have to resort to ActiveX since the HTML-keygen is not implemented in IE while Firefox does, so we have to code for the two different browsers we support.