X.509 certificate can't find with "FindBySubjectName"

Question

After a brutal struggle with WCF Security, I think I'm at the final stage now and can see the light.

I've got a Client certificate installed on my server, and is now, as advised, in the Trusted People folder of the certificate store.

However, when I try and read the certificate application -> service, I get this error:

Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'CurrentUser', FindType 'FindBySubjectName', FindValue 'Forename Surname'.

With the "Forename Surname" being the "Issued to" part of my certificate. In all tutorials I have seen, this is just one word; is this the problem? I received my certificate from my CA with these two words, with a space.

Anyone ever come across this, is there something I'm blatantly doing wrong?

Update, cert can be seen here:

Update:

It gets even more strange:

I installed Visual Studio on my web server, and used the following code to pick up the cert by Thumbprint:

var store = new X509Store(StoreName.TrustedPeople, StoreLocation.CurrentUser);
store.Open(OpenFlags.ReadOnly);
var certs = store.Certificates.Find(X509FindType.FindByThumbprint, "71995159BFF803D25BFB691DEF7AF625D4EE6DFB", false);

This actually RETURNS a valid result. When I put this information into the web.config of my service/client though, I still get the error.

Answer 1

I think..You installed certificate at location Trusted People and searching at store name my

var store = new X509Store(StoreName.TrustedPeople, StoreLocation.CurrentUser);
store.Open(OpenFlags.ReadOnly);
var certs = store.Certificates.Find(X509FindType.FindBySubjectDistinguishedName, certificateSubject, false);

Also there are two search terms FindBySubjectName or FindBySubjectDistinguishedName, the later is more relevant with keywords and first one will find anything with search keywords.

So basically you need to look for Subject and if you use above code then your search string would be .."CN=urs.microsoft.com, O=DO_NOT_TRUST, OU=Created by http://fiddler2.com"