I have not yet used 2011, so I don't completely know of what I speak. A few places where I differ with Sandeep is I prefer a public certificate that I bought rather than a self signed certificate. A couple of good blogs below. There are many more on the Internet.