SP randomly failed to validate certificate IDP certicate.

[Cantor, Scott]

> Authentication and profile exchange between IDP and SP works fine, but
> time to time SP client refuse to accept IDP certificate:

Then from time to time it's a different certificate. It's not non-deterministic.

There's either a bug open, or something I already fixed, to dump the cert out during errors, I think. It's not easy to diagnose as it is.

-- Scott