在IIS的Add Site Binding窗口，在SSL certificate中选择证书，点击OK时出现如下的提示：

One or more intermediate certificates in the certificate chain are missing. To resolve this issue, make sure that all of the intermediate certificates are installed. For more information, see http://support.microsoft.com/kb/954755

配置后，用Chrome访问会出现如下的提示：

This server could not prove that it is xxx.com; its security certificate is not trusted by your computer's operating system. This may be caused by a misconfiguration or an attacker intercepting your connection.

证书是由.key文件与.pem文件导出为.pfx文件，然后导入到IIS中的，详见： https://q.cnblogs.com/q/85088/