So we have some contractors doing work for us, and today they called me for help. While helping them I Remote Desktop connected to one of their machines, and using the MMC Certificate (Computer) snap in essentially noticed that ServerA has ServerB certifcate in it's Certificates (Local Computer) \ Personal \ Certificates store.
(FYI the certificate is based on a duplicate of the Web Server template.)
Now I have been doing cert stuff for 8 years and up to this point I would only see that servers certificates in there, in other words ServerA would only house it's own certificates in that store. So I asked them why they have this other certificate there and they said they need it there for what ever reason.
When we checked the bindings in IIS they are only using ServerA certificates there, but they have some config text files that supposedly call that other ServerB cert.
So the question is: Can or should "foreign" certificates reside in the Certificates (Local Computer) \ Personal \ Certificates store?