To fix this, use the MMC snapin to import the cert into PERSONAL, click it and grab the serial # line. Go to console prompt, run
certutil -repairstore my "paste the serial # here" (you need the quotes)
then refresh MMC with personal certs, right click it - export - select everything except DELETE PRIVATE KEY, hit ok.
Then go to IIS and IMPORT cert instead of finish request.