//服务端配置
<system.serviceModel>
    <behaviors>
      <serviceBehaviors>
        <behavior name="WcfSafeTest.Services.PaymentService">
          <serviceMetadata httpGetEnabled="true" />
          <serviceDebug includeExceptionDetailInFaults="true" />
          <serviceCredentials>
            <clientCertificate>
              <authentication certificateValidationMode="None" />
            </clientCertificate>
            <serviceCertificate findValue="tech-server" storeLocation="LocalMachine"
              storeName="My" x509FindType="FindBySubjectName" />
          </serviceCredentials>
        </behavior>


        <behavior name="">
          <serviceMetadata httpGetEnabled="true" />
          <serviceDebug includeExceptionDetailInFaults="true" />
        </behavior>
      </serviceBehaviors>
    </behaviors>

    <services>
      <service name="WcfSafeTest.Services.PaymentService" behaviorConfiguration="WcfSafeTest.Services.PaymentService">
        <endpoint address="" contract="WcfSafeTest.Services.IPaymentService"    binding="wsHttpBinding"   bindingConfiguration="myUserSafeBinding">
          <identity>
            <dns value="tech-server"></dns>
          </identity>
        </endpoint>
      </service>
    </services>

    <bindings>
      <wsHttpBinding >
        <binding name="myUserSafeBinding">
          <security mode="Message">
            <transport clientCredentialType="None" proxyCredentialType="None" realm=""></transport>
            <message clientCredentialType="Certificate" />
          </security>
        </binding>
      </wsHttpBinding>
    </bindings>


    <serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
  </system.serviceModel>

//客服端配置：
<system.serviceModel>
    <bindings>
      <wsHttpBinding>
        <binding name="WSHttpBinding_IPaymentService" closeTimeout="00:01:00"
          openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
          bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
          maxBufferPoolSize="524288" maxReceivedMessageSize="65536" messageEncoding="Text"
          textEncoding="utf-8" useDefaultWebProxy="true" allowCookies="false">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
            maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <reliableSession ordered="true" inactivityTimeout="00:10:00"
            enabled="false" />
          <security mode="Message">
            <transport clientCredentialType="None" proxyCredentialType="None" realm=""></transport>
            <message clientCredentialType="Certificate" negotiateServiceCredential="true"
              algorithmSuite="Default" />
          </security>
        </binding>
      </wsHttpBinding>
    </bindings>
    <client>
      <endpoint address="http://192.168.0.2:10009/Services/PaymentService.svc"
        binding="wsHttpBinding" bindingConfiguration="WSHttpBinding_IPaymentService"
        contract="PaymentServiceReference.IPaymentService" name="WSHttpBinding_IPaymentService">
        <identity>
          <dns value="tech-server" />
        </identity>
      </endpoint>
    </client>
  </system.serviceModel>
//证书名称就是tech-server