IIS -> Application Pools -> Advanced Settings -> Load User Profile: True
Import-Module WebAdministration Set-ItemProperty "IIS:\AppPools\DefaultAppPool" -Name "processModel.loadUserProfile" -Value "True"
https://stackoverflow.com/questions/9951729/x509certificate-constructor-exception
https://github.com/IdentityServer/IdentityServer4/issues/103
https://github.com/IdentityServer/IdentityServer3/issues/2655