Just like everybody else I generated CSR (certificate signing request) and sent it to CA which was issuing certificate for me. They sent me the certificate in PKCS7 format. When I tried to "Complete Certificate Request" in IIS Manager by giving a domain name as "friendly name" which is a REQUIRED field it said:
"Cannot find the certificate request that is associated with this certificate file. A certificate request must be completed on the computer where the request was created"
So my first thought was that the certificate was generated incorrectly and is corrupted. But that would be highly unlikely... the CA I used are one of the biggest and most trusted.
So how to fix it?
- you have to start certmgr.msc
- import this certificate into your personal certificates.
- right click on this certificate and choose properties
- EDIT friendly name because it is most likely EMPTY (I'm sure you can see the problem here)
- close the properties window
- export this certificate
- use this new exported cert with KNOWN friendly name and now the Complete Certificate Request should work without issues!