In terms of certificate behavior, at least, all the metasystem components worked together as designed, across platforms and operators, during the recent change of site key and SSL certificate at identityblog.
I have to give textdrive.com, the operators of my site, credit for going through this on extremely short notice and without charge. You could look at it as a proof of their ability to handle an emergency revocation, and another example of what a good company they are.
When using Information Cards in the most basic configuration, as I do on my site, the SSL certificate is also used for encryption of the WS-Trust token sent from the identity provider, so everything has to line up at the transport and message level. The good news is that all this worked as predicted.
It's now fine to use the site for demos – with only the usual caveats…
