SSL to authenticate server

My device connects to a central hosted connection out on internet via HTTP/S, so I want to ensure that my device is communicating with my server, and not another ‘impostor’ server that someone has setup. SSL seems the perfect way to do that, but I have 2 questions:

  1. Has the client certificate issue been resolved yet (http://www.tinyclr.com/forum/10/1010/)

  2. Does anyone have any suggestions on how to manage the client side certificate on the device? e.g. the certificate on server will expire after x years, so the client certificate will no longer validate the server since it will have been re-issued - or am i miss understanding it?