title: Issue when setting IIS binding certificate in Powershell
body: <p>I'm writing a Powershell script to go through my list of IIS bindings, find any that have a particular 'old' cert thumbprint, and replace their certs with a cert that has a 'new' thumbprint.  This is so I can update the certificate for many bindings, because we use the same certificate for a lot of sites so we need to update all bindings that have the old cert to the new cert.  Here's what I've come up with:</p>
  
  <pre><code>##### EDIT THESE VARIABLES #####
  $SiteName = "movc-website-www"
  $OldCertThumbprint = "‎76 ae 0b 2e b9 f7 45 ce 27 c4 02 6e 90 66 62 93 69 d7 5e 4c"
  $ReplacementCertThumbprint = "‎7f fa 9f f3 90 b8 a2 d8 4c 98 51 47 a5 64 1d 90 f6 2f ca 73"
  
  ##### FUNCTIONS #####
  Function ReplaceWebsiteBinding {
      Param(
          [string] $SiteName,
          [string] $OldCertThumbprint,
          [string] $ReplacementCertThumbprint
      );
  
      Import-Module WebAdministration;
  
      $ReplacedCount = 0
  
      $IISBindings = (Get-ItemProperty -Path "IIS:\Sites\$SiteName" -Name Bindings)
      for ($i=0; $i -lt ($IISBindings.Collection).Length; $i++) {
          if (($IISBindings.Collection[$i]).certificateHash -eq $OldCertThumbprint) {
              ($IISBindings.Collection[$i]).RebindSslCertificate($ReplacementCertThumbprint, "My")
              $ReplacedCount++
          }
      }
  
      Return $ReplacedCount
  }
  
  ##### MAIN PROGRAM #####
  $OldCertThumbprint = $OldCertThumbprint.Replace(" ", "").ToUpper()
  $ReplacementCertThumbprint = $ReplacementCertThumbprint.Replace(" ", "").ToUpper()
  
  # Check that cert with given thumbprints exist
  $FoundCert = Get-ChildItem -Path Cert:\LocalMachine\My |
      Where-Object { $_.Thumbprint -eq $OldCertThumbprint } |
      Select-Object -ExpandProperty Thumbprint
  if (!$FoundCert) {
      Write-Host "Old cert with thumbprint $OldCertThumbprint not found!"
      Exit
  }
  
  $FoundCert = Get-ChildItem -Path Cert:\LocalMachine\My |
      Where-Object { $_.Thumbprint -eq $ReplacementCertThumbprint } |
      Select-Object -ExpandProperty Thumbprint
  
  if (!$FoundCert) {
      Write-Host "Replacement cert with thumbprint $ReplacementCertThumbprint not found!"
      Exit
  }
  
  # Associate new cert with bindings that have old cert
  $ReplacedCount = ReplaceWebsiteBinding $SiteName $OldCertThumbprint $ReplacementCertThumbprint
  
  Write-Host "Replaced $ReplacedCount binding(s)."
  </code></pre>
  
  <p>The trouble is this doesn't work because the line calling <code>.RebindSslCertificate(...)</code> gives me the following Powershell error:</p>
  
  <pre><code>Value does not fall within the expected range.
  At (...)
  +             ($IISBindings.Collection[$i]).RebindSslCertificate($Repla ...
  +             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + CategoryInfo          : OperationStopped: (:) [], ArgumentException
      + FullyQualifiedErrorId : System.ArgumentException
  </code></pre>
  
  <p>Not the most useful error really, and I can't figure out why I'm getting it.  The arguments look OK to me; the thumbprint was found by the <code>Get-ChildItem</code> code and "My" looks fine.  The only thing I can think of is that it might be looking in the current user certificate store rather than the local machine certificate store, which is where the desired certs are.  Can anyone help me with why this error is happening?</p>