See how others Configure SSL in Windows Professional

My SSL test seems to be a little bit right.
(Note Little brother set up DNS domain name resolution, 192.168.0.100 IP binding two domain names, www.mydotnet.com and www.zhang.com)
--------------------The following is the activation of SSL and obtaining the installation server certificate------------
Enable SSL on the server
This section describes how to create a certificate request, obtain a beta test server-side certificate from the Verisign site, and install it on a WEB server.
To enable SSL on the server using IIS 4.0
Right-click the Web site for which you want to enable SSL, and select Properties.
On the Directory Security tab, click Edit Secure Communications.
In the dialog box, click Key Manager.
Expand the local computer node in the tree view. Right-click the WWW leaf and select New key. This launches the key Request Wizard, called the Key Manager.
Select put the request in the file to send to the authority and a file name. Click "Next".
Enter a key name that is easy to remember. Enter the password that is required when obtaining a certificate issued by an authority. For the encryption key byte length, select 1024 (1024 is the recommended length, and some authorities do not issue certificates that are less than this length). Click "Next".
Enter your organization and department name. Enter a common name that is equivalent to the full site name, such as www.yoursite.com. Before you start an SSL connection, the client checks to see if the site name is the same as the common name of the certificate. Click "Next".
Enter the country (region), state, city/County location. The certification authority may check that the information is consistent to ensure that the information entered is valid. When you enter a province, enter the full province name.
Enter the name, e-mail address, and phone number of the person who manages the server. This information is not included in the certificate, but is required by the certification authority.
The file containing your request has been created. The file is in the BASE64 encoding format. During this process, IIS also creates a private key and a public key for the certificate request. The private key will be saved on your computer, and the public key will be sent to Verisign along with the request to encrypt the certificate data.
Go to Www.verisign.com (English) and click Get Trial SSL ID. When registering a certificate, you are asked to provide a CSR (certificate signing request). Copy and paste your request file yourself "BEGIN NEW certificate request;" After the content, otherwise, there will be an error. Verisign sends the test server-side certificate to you in the form of a message. The same process applies to a business certificate, except that it charges and carefully verifies the information submitted.
Make sure that the certificate obtained from the certification authority is BASE64 encoded. If the certification authority is Verisign, you can obtain a certificate by e-mail. Create an empty file with a. cer extension, copy all of the content between the line "BEGIN certificate" and "End Certificate" (which contains both lines) and paste it into the file.