I have searched in vain to find a solution to this specific query but cannot find a situation identical to mine.
In IIS 8.5, say I have multiple domains, and I have a SAN SSL cert (not wildcard) bound to each one using SNI:
a.domain.com b.domain.com c.domain.com
If I wanted to add
d.domain.com and generate a new SAN that includes the new domain, I want to be able to replace the current cert without having to re-bind the new one to the 3 above domains (I can then manually bind the new 4th domain).
Now imagine in my example above that I actually have 20 domains - it's fairly time-consuming to do this, especially if you add a new site every couple of weeks - not to mention the downtime whilst I re-bind the SSL site-per-site.
Is there a solution I can apply to automate this process? I could envisage a PS script doing it provided I have the new cert's hash, but my PS-fu is not strong enough to work out how to iterate through all the sites and re-apply the cert (if that's how it needs to be done). Ideally it would be a solution that automatically imports the new cert (.pfx), removes the old one, and rebinds the sites.
EDIT: To confirm, I'm using one IP address for all sites.