I am on Windows XP Pro SP2, IIS 5.1

In IIS.msc, on "Default Web Site", right-click "Properties", go to
"Directory Security" tab, click "View Certificate" button:

Issued To = "localhost"
Friendly Name = "SoloffWeb"

This properties exactly match the cert I just created using "Server
Certificate" button on "Default Web Site"



Howevever, in MMC, add Certificates snap-in, go to "Certificates" (local
computer), "Personal", "Certificates" :

Three certificates are listed with following properties identical:
Intended Purposes = "Server Authentication"
Certificate Template = "Web Server"

Cert 1
Issued To = "localhost"
Friendly Name = "localhost"


Cert 2
Issued To = "localhost"
Friendly Name = "SoloffWeb"


Cert 3
Issued To = "<machine-name>"
Friendly Name = "localhost"


I have two questions:


(a) how can there be multiple certificates with these properties identical :

Intended Purposes = "Server Authentication"
Certificate Template = "Web Server"


(b) I suspect that some of these certificates are no longer relevant and
should be deleted ... good idea ?


Any info on how this process is supposed to work most appreciated.

[ Post a follow-up to this message ]

Replied in asp.net/iis
-----------------
a) The properties you see in the cert is just indicating what type of cert
it is and its role/function of the cert. So, in your case, you have three
webserver SSL cert to verify the server + provide ssl tunnel.

b) As long as you are sure that you are not going to use it, feel free to
delete it. Just to be safe, export it out to pfx file and store it in a
tape, then remove it.

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:O3ViqWjjFHA.1464@TK2MSFTNGP14.phx.gbl...
>I am on Windows XP Pro SP2, IIS 5.1
>
> In IIS.msc, on "Default Web Site", right-click "Properties", go to
> "Directory Security" tab, click "View Certificate" button:
>
> Issued To = "localhost"
> Friendly Name = "SoloffWeb"
>
> This properties exactly match the cert I just created using "Server
> Certificate" button on "Default Web Site"
>
>
>
> Howevever, in MMC, add Certificates snap-in, go to "Certificates" (local
> computer), "Personal", "Certificates" :
>
> Three certificates are listed with following properties identical:
> Intended Purposes = "Server Authentication"
> Certificate Template = "Web Server"
>
> Cert 1
> Issued To = "localhost"
> Friendly Name = "localhost"
>
>
> Cert 2
> Issued To = "localhost"
> Friendly Name = "SoloffWeb"
>
>
> Cert 3
> Issued To = "<machine-name>"
> Friendly Name = "localhost"
>
>
> I have two questions:
>
>
> (a) how can there be multiple certificates with these properties identical
> :
>
> Intended Purposes = "Server Authentication"
> Certificate Template = "Web Server"
>
>
> (b) I suspect that some of these certificates are no longer relevant and
> should be deleted ... good idea ?
>
>
> Any info on how this process is supposed to work most appreciated.
>
>
>
>
>
>

[ Post a follow-up to this message ]