I guess the question now is why can't we pull the cert automatically? I work with guys that are using google phones and they seem to pull the cert fine but windows based phones need to have the cert manually installed or installed thru activesync on a network computer. you'd think windows would play nicer with other flavors.