I have a project that require client application to register and then use the services. I would like to do the following

1. A client app sends a request with IP, domain name etc tomy REST service
2. The rest service creates a new certificate based on the parameters and then sends back to the app.
3. The application will then send the thumbprint of the certificate to prove it is genuine.
4. On receiving the certificate, I will use the server certificate which has private key to validate the received input.

I have been searching in the internet and only found that the certificate were created manually. Also, there was no way to generate a certificate on runtime

Please suggest the right practice. I am a .net developer.

I have a project that require client application to register and then use the services. I would like to do the following:

1. A client app sends a request with IP, domain name, etc. to my REST service
2. The rest service creates a new certificate based on the parameters and then sends back to the app.
3. The application will then send the thumbprint of the certificate to prove it is genuine.
4. On receiving the certificate, I will use the server certificate which has private key to validate the received input.

I have been searching in the internet and only found that the certificate were created manually. Also, there was no way to generate a certificate on runtime

Please suggest the right practice. I am a .net developer.