SharePoint Pain

[SharePoint 16.0.5530.1000] When you delete a web application in SharePoint, whether through PowerShell or Central Admin, you can instruct SharePoint to remove the associated IIS site with it. However, if the web application is running on port 443, the SSL certificate binding may need to be cleaned up manually. At first glance, one might assume that deleting the IIS site would automatically remove the SSL binding, as the site would no longer be available. Unfortunately, this is not always the case. This can be verified by checking the Windows System event logs, which would become flooded with Event ID 15021 errors if the binding is not cleaned up: "An error occurred while using SSL configuration for endpoint <webAppIP>:443.  The error status code is contained within the returned data." Diagnosis Use the netsh http   command to diagnose and fix the error. You can include the reported IP address from the System event logs in the command to verify the existence of the cer...

Applies to SharePoint 2016; not tested on other versions of SharePoint.   Symptoms   Windows Application Event Viewer shows two certificate-related errors every minute as follows:   Event ID 8306   An exception occurred when trying to issue security token: ID3242: The security token could not be authenticated or authorized..   Event ID 8311   An operation failed because the following certificate has validation errors:   Subject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US Issuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US Thumbprint: 8C0669A6945F6A310538F1F8159D541CBDFE9427   Errors:   PartialChain: A certificate chain could not be built to a trusted root authority. RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate. OfflineRevocation: The revocation function was unable to check revocation because the revocation server was offline. ...