title: SSL Certificate Disappearing from IIS
body: <p>This may seem like a duplicate of this and it kind of is but none of the solutions I tried worked for me! Here is the related Question:</p>
  
  <p><a href="https://stackoverflow.com/questions/21009834/installed-ssl-certificate-in-certificate-store-but-its-not-in-iis-certificate">Installed SSL certificate in certificate store, but it&#39;s not in IIS certificate list</a></p>
  
  <p>My system is Windows 2016 running IIS 10. We issued a CSR file using IIS using *.mydomain.com (nothing in the Common Name, I think, because that will get named upon receiving GoDaddy's response). Our client went to GoDaddy.com, purchased a Wild Card certificate, and sent me a zip file with a .p7b and a .crt file. I installed the .p7b in the Intermediate Certificate section, per GD instructions. So now in the Certificate is in the Personal folder with info like 'issued to *.mydomain.com' and friendly name being 'gis.mydomain.com'.  </p>
  
  <p>But the Certificate does not have Private Key--and I think that's the problem: The Certificate disappears in IIS manager. When I try the <code>certutil -repairstore</code> command I get a prompt for a Card insertion. </p>
  
  <p>Here is a fix I am thinking about: From the Certificate Enrollement Requests part of the console, export to a pfx file, then, using OpenSSL, make a PEM file. Then create a new pfx file to Import to IIS; problem is that the new pfx file creation gives me error "No Certificate Matches Private Key". Here is the command:</p>
  
  <pre><code>pkcs12 -export -in 1d4c26d43a4da203.crt -inkey my.pem -out final.pfx
  </code></pre>
  
  <p>Please note that Rekeying at GoDaddy may not help: Their .CRT file seems to be generated without the Private Key. Also, DigiCert is unable to find Private Key on the server even though the CSR file was created on the same server.</p>
  
  <p>What are my options?</p>
  
  <p>Thanks!</p>