In this years annual certificate renewal for our servers I have learned that the certificate "path" matters. starting this year there was a lot of changes in CA's and how they administer certificates. Well, in an attempt to reestablish a trust relationship with my servers and my CA I learned that the images below ... mater. just a word to the wise if anyone else is coming across something like this. This would be something you should check to make sure things are working properly in your environment.

basically the certification path found in your servers MMC should match the certification path found in your IIS after you complete the binding of your site.

what I noticed is that the cert I was working with... the one that was failing. was missing 2 of the paths needed. something like this