By one means or another CAcert is now ploughing the ground for Single-Sign-On with browser-installed client certificates. This talk will point to experiences, traps & traumas, and conclude that actually, it's well worth while and does actually give benefits. Once you have a chicken, you can lay some eggs. The community CA -- with a network of 3000+ assurers, we provide one of the largest webs of trust around the world, dedicated to something or other about security.