title: Use of AddSigningCredential(cert) in Identity Server 4
body: <p>I have set up an IdentityServer 4 application as per the following <a href="https://stackoverflow.com/a/35306021/6181928">answer</a>. The author has used <code>X509Certificate2</code> in <code>AddSigningCredential(cert)</code>. I used <code>AddDeveloperSigningCredential()</code> in development, which has created a <code>tempkey.jwk</code> file in my project folder.</p>
  <p>I then tested this Identity Server 4 application with postman:</p>
  <p><a href="https://i.stack.imgur.com/vRmXW.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/vRmXW.png" alt="enter image description here" /></a></p>
  <p>The above call results in the successful generation of Token. Now, I need to go into production. I have created an Azure App Service to host the Identity Server 4 application.</p>
  <p>I have a very little understanding of Digital Certificates and Identity Server 4. I have gone through a few articles/answers but I am getting super confused. Just need to understand all of it in easy words.</p>
  <p>My questions are:</p>
  <ul>
  <li>How can I create the <code>X509Certificate2</code> certificate, as done <a href="https://stackoverflow.com/a/35306021/6181928">here</a>?</li>
  <li>How would the <em>Client</em> application be using this certificate?</li>
  <li>Where is it being used in development mode, as I am not providing any <em>Public Key</em> in the Postman call?</li>
  </ul>