title: Can I use Client Certificates on Azure App Services without a custom domain?
body: <p>For testing purposes I would like to enable the 'Incoming Client Certificates' option in my Azure App Service (running a WCF webservice), and see if my Client application can still connect to the webservice. Since I am still in a testing phase, my app service still has the .azurewebsites.net domain name.</p>
  
  <p>However, I can't seem to figure out how to get a proper client certificate that the server will accept (without switching to a custom domain name, which I know will work). </p>
  
  <p>Currently, I see 2 possible routes to a solution:</p>
  
  <ol>
  <li>Somehow get my hands on .cer that is signed by a CA trusted by the App Service server.</li>
  <li>Generate a self-signed .pfx and .cer with my own self-signed CA. Import the pfx on the App Service and install the .cer on the client.</li>
  </ol>
  
  <p>Both directions have not yielded any success so far. Does anyone have any experience with this? </p>