I work Tech. Support at a web design company. Many of our past clients are hosted by another company ("Company X") but they renew their SSL certificates through us. We sell QuickSSLs from GeoTrust. We develop in .NET so all hosting is IIS.
Company X has gone downhill since we started (then stopped) recommending them and now it's a pain to renew SSL certificates with them. For a while they charged us $50/renewal to cover their time (export CSR, install CER). They frequently move sites to new servers and say the SSL can't transfer with it (and occasionally try to sell their own SSLs). It's impossible to explain to our clients why we can't just resend the certificate to use on the new server (we only have the CSR and CER).
So instead I want to order these SSL certificates from start to finish on one of our internal IIS servers, then export a PFX and send it to Company X. If they lose it we have a copy on our end, and there are fewer steps to go wrong.
I can't find anyone else who is doing this. Is it a bad idea or just a desperate one? Is there a technical limitation I'm missing (like IIS6 to IIS7)? If your SSL vendor did this would you be put off? I can't decide if this is a bad idea or an obvious one.