Hey,
I am using IIS 10 running on a Windows Server 2016 and need to set up an https binding.
I set up a certificate request where Friendly Name and CN equal <hostname.domain.ccTLD>, also having alternative names (Type: DNS) specified in the request that look like <hostname.domain.ccTLD> & <alias.domain.ccTLD>.
After handing the request over to the internal CA I'm getting a .p7b chain certificate consisting of server, intermediate and root certificate.
To make the certificate available for IIS and my <Default Web Site> I export the .p7b (including the whole chain) to .pfx with the private key included. After that I import the .pfx to the local computer personal certificates, using mmc and the Certificates Snap-In.
After sucessfully importing the .pfx the server certificate (containing the private key) is being recognized in IIS Configuration under "Server Certificates".
When I now try to set up the related https binding for the <Default Web Site> selecting my imported certificate it will always fail throwing the error "value does not fall erverwithin the expected range".
Does anybody know how to handle this?
Cheers!