I’ve experience one time after changing the Service Communication certificate it showed correctly in the adfs console, but when i browsed the site it was still using the old certificate.
i did a netsh http show sslcert and it showed a different thumbprint than the new certificate.

The solutions was to delete all the bindings for 443.
for security copy the output to notepad so you get the right parameters
and add;
add sslcert hostname=sso.kakster.dk.dk:443 certhash=A7A32B853CFDCBE3962EA4471EA6F90833E66A6D appid={5d89a20c-beab-4389-9447-324788eb944a} certstorename=MY sslctlstorename=AdfsTrustedDevices
add sslcert hostname=localhost:443 certhash=A7A32B853CFDCBE3962EA4471EA6F90833E66A6D appid={5d89a20c-beab-4389-9447-324788eb944a} certstorename=MY sslctlstorename=AdfsTrustedDevices
add sslcert hostname=sso.kakster.dk:49443 certhash=A7A32B853CFDCBE3962EA4471EA6F90833E66A6D appid={5d89a20c-beab-4389-9447-324788eb944a} certstorename=MY
replace sso.kakster.dk with the dns name for your adfs server.
Replace appid with the appid in notepad
Was this site helpful?