Hi all,
I need your help to give advice for cert renewal in my website server. Actually, the old SSL cert was expired and I renewed this cert based on the following steps.
1) install the public cert
2) grant permission rights to IIS service account that need to use the public cert
3) Rebind the IIS for the website with the new cert
4) Restart the IIS and application pool for the website
5) Verified that the website is accessible
6) Remove the old public certificate
7) Verified that the website is accessible.
The server was still accessible after the renewal. However, on the next day it was down; some users weren't able to access the server anymore. After analysis, we noticed that the cert was updated when accessing via localhost, but via network it returned the old cert. Besides, during the time when this error happened, some users are still able to access.
Questions:
Why didn't the issue happen after renewing instead of the next day?
Is there a SSL cert cache for SSL negotiation in IIS?
Could any please give me recommendations to find out the root cause of this problem?
Many thanks
