title: Guidance on Thinktecture IdentityServer v3 - certificates
body: <p>I am working up a demo of Thinktecture IdentityServer v3.  The intention is to have the identity server run as it's own website under Azure Websites.</p>
  
  <p>There will be other (more than one) Azure Websites that will use the identity server to authenticate users.</p>
  
  <p>Based on the getting started walkthrough (see <a href="https://github.com/thinktecture/Thinktecture.IdentityServer.v3/wiki/Getting-started" rel="noreferrer">https://github.com/thinktecture/Thinktecture.IdentityServer.v3/wiki/Getting-started</a>) I have this <em>mostly</em> working.</p>
  
  <p>Where I am having trouble is with the certificates.</p>
  
  <p>For the demo, I'd like to create my own certificate - but I am unsure of what I need to do.  Any guidance would be helpful.</p>
  
  <p>Other questions I have on this:</p>
  
  <ol>
  <li>Are self-signed certificates able to be used?</li>
  <li>In a production scenario, would self-signed certificates be acceptable, or would they really need to be signed by a trusted root authority?</li>
  <li>How would these certificates be installed into an Azure Website (or can I load from disk)</li>
  </ol>