The problem was resolved by adding IIS_IUSR group.
From this link Add group IIS_IUSR:
The problem was that the Permissions for the Private Key of the Certificate in the Windows Certificate Store did not have the IIS_IUSRS group set to allow read access.
Right click certificate -> All Tasks -> Manage Private Keys -> Add group “IIS_IUSRS”