Fixing a https Cert in Windows

 I renewed a https cert today in Windows and had problems with the new Cert sticking in Windows

It would add fine, without error, but would disappear when the IIS Server Certificates screen would refresh. 

Open the Certificates in MMC (Local Machine) and inspecting the Web Hosting gave a clue, the new certificate was there, but with a key - the private key was missing. 

Could be because the original certificate was created on a completely different machine and imported to this new server. 

At any rate, a simple certutil command fixed it . 

A tip I received from SSL disappears from the certificate list on Windows server - SSL Certificates - Namecheap.com

Key steps are: 

1. Double-click the certificate and go to Details tab.
2. In certificate details locate the Serial Number field, click on it and copy its value.
3. Open Command Prompt, pressing Win+R and typing cmd, then click OK
4. In the command prompt type: certutil -repairstore my Serial_number from step 9

I actually typed 

    certutil -repairstore webhosting serialnumber

I had to replace my with webhosting, which leads to another tip, getting the command line names of the certificate stores.  

This is achieved with the following... 

PS C:\Users\Administrator> ls Cert:\LocalMachine

Name : TrustedPublisher

Name : ClientAuthIssuer

Name : Remote Desktop

Name : Root

Name : TrustedDevices

Name : WebHosting

Name : CA

Name : Windows Live ID Token Issuer

Name : REQUEST

Name : AuthRoot

Name : FlightRoot

Name : TrustedPeople

Name : addressbook

Name : My

Name : SmartCardRoot

Name : Trust

Name : Disallowed

Name : WindowsServerUpdateServices