Upon importing certificate into the IIS7 server, you may sometimes get an error called:
“Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created” or "ASN1 bad tag value met".
This may mean that the CSR you have used for certificate activation was not generated within the server you are installing your SSL on. If this is the same server, you may proceed the following way:
Close the window with the error and refresh the list of certificates (usually done with F5 key). Certificate should now appear in your server certificates list (most likely it will not have a “Friendly Name”). If you see it, this means the certificate has been installed successfully and you may proceed with certificate bindings. If certificate is not visible in the list, please create a new Signing Request and reissue your certificate. After reissue is completed, please retry installation.
To avoid error message, please perform the following steps during installation:
No error should be faced and your certificate should appear in the list of “Server Certificates” and you may proceed with bindings:
That’s it, your certificate is now fully functional!