LoneCoder: That new client build worked GREAT for me. I had to do one step at the end with OpenSSL.exe to combine the pieces into a PFX that would import into IIS on Win2012.
openssl pkcs12 -export -out name.pfx -inkey name-key.pem -in name-crt.pem
Also I didn’t realize right away that I had to run the client on the (public) server so that DNS would resolve the domain name to the copy of IIS where the client was running. But all in all, great first result. Thank you.