I found Gotcha 2a – When you want to modify the application to use your own cert modify the properties of the cert in Visual Studio so that the Build Action is Content and the Copy to Output Directory is either Copy Always or Copy if Newer. You won’t notice this debugging the web site locally but when you try to run the packaged service, even in the development environment it will fail.