Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 0 down vote favorite

I installed a new SSL certificate into IIS7, removed the old certificate and setup the bindings for the new certificate - so https is now bound to the new certificate only.

I restarted IIS7 (and the Windows 2008 Server itself) and checked the certificate using the commands:

netsh http show sslcert

This showed the new certificate only, as I expected

certutil -store MY

This also only showed the new certificate and not the old one, as I expected

I also opened mmc and checked the certificates there and I only see the new one and not the old one.

I'm also using an account with Administrator privileges.

However - when I open a browser (from any computer) and go to the https site it is still using the old certificate. Even when I remove the old certificate from the browser it still gets sent the old one and not the new one.

Can anyone help me work out where I'm going wrong? How can I exorcize the old phantom certificate?

Many Thanks!

share|improve this question
You restarted IIS? I've seen odd problems with IIS and intermediate certs if the cert did not actually get imported correctly requiring a restart. – mahnsc Oct 11 '11 at 16:25
Which browser specifically? Some "clever" browsers (like Google Chrome) do "cache" SSL certificates .. and the only cure I know is to wait -- max in 2 days browser will fetch new one -- I have seen it before. Try another browser if you have not done it yet. – LazyOne Oct 11 '11 at 16:29
I did restart IIS and still get the same problem. I've tried it with Firefox, IE and Chrome - and have been careful to delete the previous SSL certificate from the browser cache. Thanks for your suggestions! – joechip Oct 11 '11 at 16:41
You already have posted a closed question on SO and a valid question on SF. Please stop cross-posting you problem. – Simone Carletti Oct 11 '11 at 16:41
Sorry! I was surprised it was closed on SO because certificates are such a common issue for programmers these days. I wasn't sure if this should go to SF or Pro Webmasters, because there seems to be a huge overlap between the two. – joechip Oct 11 '11 at 16:43
show 1 more comment

closed as off topic by John Conde♦ Oct 11 '11 at 18:30

Questions on Webmasters Stack Exchange are expected to relate to webmastering within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.

Browse other questions tagged or ask your own question.