New cert not working in IIS 10

Question

I installed a new cert. The site wasn't coming up. After researching the error message being generated, I saw it was "An error occurred while using SSL configuration for endpoint 0.0.0.0:443." Not the actual endpoint, but you get the idea. Further research said to use the command "netsh http delete sslcert ipport=0.0.0.0:443." Which I did. While that resolved the issue with it being listed after I do the "netsh http show sslcert," or the error being in the Event Viewer, the site still doesn't come up. I even deleted the actual cert I had installed, redownloaded it, reinstalled it, and I'm still at the same place. I currently don't know if I need to undo the delete, or not, nor what I need to do in order to get the site working.

Answer 1

The URL that you are browsing should match the CN name on the certificate.

This site uses Learn.Microsoft.com

In the IIS binding for the site you would set the host name (DNS name) and select the certificate.

So on Microsoft's IIS web server, the host name would show Learn.microsoft.com.

The Digicert utility is useful for testing.

https://www.digicert.com/support/tools/certificate-utility-for-windows