I have a WSE Enabled web service that implements a X509 Certificate Policy and i want to know where the X509 cert resides for the web application.

the webservice has the certificate installed on the machine that is hosting the webservice and life is good. BUT i am not for sure what to do with the webapplicatin.

If i install a winform application and call the webservice, the cert has to reside on the local machine where the winform is installed - BUT - if i am using a web application i am not for sure where the cert needs to reside. Does it reside on the server hosting the web application? or does it have to reside on the client machine that is using the webapplication.

thanks,
jason.