export and import existing certificate
use certificate mmc add-in to add new certificate(pfx) to certificate store.
then IIS can lookup this certificate from store, doesn't have to make a new request.
another good new openssl 0.9.9 will support PVK file for private key, it's still in development. we can use pvk with secu lib to program certificate cryptograph.