So I think we can have a command like 
<i>knife winrm listener create --certinstall</i>
This command will first install cert to the windows cert store and then create the winrm listener.