The client and server should be authenticated. The request does not fail if the server is not authenticated. To determine whether mutual authentication occurred, check the value of the System.Net.WebResponse.IsMutuallyAuthenticated property.