We just had a support case where a customer was trying to use Client Certificate authentication with SharePoint 2010.
Client Certificate authentication was a supported authentication method in SharePoint 2007 but with SharePoint 2010 client certificate authentication it is not supported and there are also certain scenarios where using client certificate authentication will not work (especially when accessing WCF web services internally).
In case you are using certificate authentication currently in SharePoint 2007 ensure to take this into consideration when preparing the migration to SharePoint 2010.
Details about the supported authentication methods for SharePoint 2007 and 2010 can be found below:
[Update] Just to clarify: Microsoft SharePoint Foundation 2010 does not provide built-in support for Client Certificate Authentication, but Client Certificate Authentication is available through integration with Active Directory Federation Services (AD FS) 2.0, or any third-party identity management system that supports standard security protocols such as claims-based authentication, WS-Trust, WS-Federation, and SAML 1.1. More details here.
Would it work if an IP-STS used Client Certificate and SharePoint used this STS as a Trusted Identity Provider, this way SharePoint only uses the FedAuth cookie?