Maybe the SQL server service account has no read rights on the certificate.

How to:

Launch MMC (type mmc.exe in the Windows search bar)

Go to File > Add / Remove Snap-in …

Select...