Editing this post a little bit to focus only on IIS binding of autoenrolled certificates. We have Windows Server 2003 Certificate Authorities that a year ago issued out certificates to Windows 2008 servers. Those auto enroll certificates are now expiring/renewing. Although the auto enroll is working, and the 2003 Servers get new certificates, those certificates do NOT keep their binding in IIS. We can duplicate the error by manually renewing the certs in the MMC, then checking bindings in IIS, can you guys try it and tell me what happens?

anybody, I can't believe this has not bitten anyone else