I have an Azure Web Site running successfully for the last year over SSL. The certificate is expiring, so I purchased a renewal. The steps I followed were:
use IIS to create the CSR
download the PKCS7 package (which includes intermediate certificates) from GeoTrust
complete the certificate request in IIS
use the certmgr MMC snap-in to export the PFX file with a private key and including all intermediate certificates and extended properties
upload to Azure
I am getting an error from Azure on step 5 - "Could not upload the certificate for web site XYZ." And the expanded error detail is "At least one certificate is not valid (Certificate failed validation because it could not be loaded.)"