If you have issues with wacs.exe on Windows server while trying to renew your SSL certificate with domains that are protected by CloudFlare try changing SSL from Full to Strict and then renew the certificate, then reverse to full because it has better protection.
I find this topic but it is closed and I could not reply there: