The issues with Certificates and the Surface, has been around for a while. Even Phone 7 had major issues with SBS servers using self signed Certs. I ran into this not only with SBS2003 but SBS2011, and is a major issue with Microsoft basically not supporting itself.