There are many ways to manage server certificates programmatically. This section provides a description of two different methods, including sample scripts for performing management tasks related to server certificates. One method uses the IISCertObj COM object, and the other method uses a CAPICOM-based script. CAPICOM is a CryptoAPI interface.
You can use IISCertObj to perform the following tasks:
Import copies of a server certificate from a .pfx file (a file containing a PFX-encrypted server certificate and a private key) from a server to multiple servers.
Save backup copies of server certificates on a central site.
Copy a server certificate from one server ...