1. With your SSL certificate now imported into MMC Double Click your SSL Certificate.
2. On the certificate information window that opens, select the Details tab, scroll down and select the Thumbprint field from the list.
3. The Thumbprint will appear in the box below; select the thumbprint and copy to clipboard (click anywhere in the box, then press Ctrl+A followed by Ctrl+C on the keyboard)
4. Open up a Command Prompt (CMD) and run as an administrator and run the following command.
5. certutil -repairstore my “<thumbprint>”
Note: If you right click on CMD you will have a paste feature to paste the copied thumbprint in-between the quotes.
6. The command should similar to:
certutil -repairstore my “00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f”
Note: If you see a Question Mark ? in the front of your thumbprint Delete it.
7. If the command completes successfully, you will see a bunch of information with the following message appearing at the bottom:
CertUtil: -repairstore command completed successfully.
8. Double check the certificate back in MMC by double clicking it. If your certificate states “You have a private key that corresponds to this certificate.” This means your SSL Certificate was able to marry with its private key, and is now ready for binding to its services, export, etc..
หากยังไม่สามารถ Matching Certificate กับ Private Key ได้ แนะนำให้ทำการ reissue โดยสร้าง CSR แล้วส่งมาให้ทีมงานเพื่อขอออก Certificate ให้ใหม่